支持本站 — 捐款将帮助我们持续运营

目标: 1000 元，已筹: 1000 元

100.0%
立即捐款

POC详情: 2baabd1f99dbc093fdd189a6ec2e33f4552f392b

来源
https://github.com/sirredbeard/CVE-2025-55315-repro
关联漏洞
标题:Microsoft ASP.NET Core 环境问题漏洞 (CVE-2025-55315)
Description:Microsoft ASP.NET Core是美国微软（Microsoft）公司的一框跨平台开源框架。该框架用于构建Web应用、物联网应用和移动后端等基于云的应用程序。 Microsoft ASP.NET Core存在环境问题漏洞，该漏洞源于攻击者利用该漏洞可以绕过某些功能。
介绍
# CVE-2025-55315-repro

This repository contains a small ASP.NET Core console app to reproduce and exercise HTTP chunked-transfer and newline parsing behavior.

More information on [CVE-2025-55315](https://github.com/dotnet/aspnetcore/issues/64033).

## Contents

`Repro/Program.cs` - Console app that starts a local Kestrel server and runs two TCP-based tests. The tests send raw HTTP bytes over a `TcpClient` to exercise chunked transfer parsing and invalid newline handling across fragmented reads.

If these tests fail, you are vulernable to CVE-2025-55315 and need to update your version of .NET (versions 8, 9, and 10) or obtain post-EOL support for .NET (version 6) from [HeroDevs](https://www.herodevs.com/support/dot-net-nes).

### Passing Tests

<img width="1468" height="749" alt="image" src="https://github.com/user-attachments/assets/3dc3c652-eb78-48c1-b47a-bf63dc058ee1" />

### Failing Tests

<img width="1468" height="751" alt="image" src="https://github.com/user-attachments/assets/883de76c-6cf1-4a29-bec7-4bb033f0a163" />

## Prerequisites

.NET SDK 6+

## Build and Run

```pwsh
git clone https://github.com/sirredbeard/CVE-2025-55315-repro
cd CVE-2025-55315-repro
dotnet build CVE-2025-55315-repro.sln --framework net6.0
dotnet run --project Repro/Repro.csproj --configuration Debug --framework net6.0
```
文件快照

 [4.0K]  /data/pocs/2baabd1f99dbc093fdd189a6ec2e33f4552f392b
├── [4.3K]  build.ps1
├── [1.1K]  CVE-2025-55315-repro.sln
├── [1.1K]  LICENSE
├── [1.3K]  README.md
└── [4.0K]  Repro
    ├── [8.1K]  Program.cs
    └── [ 431]  Repro.csproj

2 directories, 6 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。