CVE-2025-15604 Amon2随机数生成不安全漏洞

# PoC: Perl script simulating the vulnerable random string generation logic # This demonstrates how the fallback mechanism uses weak entropy sources. use strict; use warnings; use Digest::SHA qw(sha1_hex); use Time::HiRes qw(time); # Simulate the vulnerable function in Amon2 < 6.17 sub vulnerable_random_string { my ($length) = @_; # Weak entropy sources: built-in rand, PID ($$), and time # In a real attack, these values can be guessed or brute-forced my $weak_seed = int(rand(2**32)) . $$ . Time::HiRes::time(); # Generate hash from weak seed my $hash = sha1_hex($weak_seed); # Return truncated string return substr($hash, 0, $length); } # Example usage print "[+] Generating vulnerable token...\n"; my $token = vulnerable_random_string(10); print "[+] Token: $token\n"; print "[!] Note: This token is predictable if PID and Time are known.\n";