来源

关联漏洞

描述

A simple, easy-to-use POC for CVE-2025-42813 (Apache Tomcat versions below 9.0.99).

介绍

# CVE-2025-24813 Proof-of-Concept (Standalone)

This repository contains a non-destructive, standalone PoC for [CVE-2025-24813](https://nvd.nist.gov/vuln/detail/CVE-2025-24813), a vulnerability in Apache Tomcat 9.0.55 allowing remote file upload via partial `PUT` requests. This exploit demonstrates code execution by uploading and accessing a benign JSP file.

---

## 📁 Contents

- `proof.jsp`: Harmless JSP payload to demonstrate code execution.
- `cve_2025_24813_client_demo.py`: Python3 script to detect, exploit, verify, log, and clean up.
- `report.txt`: Auto-generated log of the testing session.

---

## 🧰 Requirements

- Python 3.7+
- Optional: `html2image` for screenshot capture:
  ```bash
  pip install html2image
  ```

---

## 🖥️ Usage

```bash
python3 cve_2025_24813_client_demo.py
```

You will be prompted for:
- Target IP or hostname (e.g., `192.168.1.100`)
- Target port (e.g., `8080`)

---

## 🔍 Features

- ✅ Partial PUT vulnerability check (CVE-2025-24813)
- ✅ Optional screenshot capture (via `html2image`)
- ✅ Interactive prompts and confirmation before exploitation
- ✅ Color-coded terminal output
- ✅ Logs to `report.txt`
- ✅ Auto cleanup via HTTP DELETE after 24 hours

---

## ⚠️ Safety & Ethics

This PoC is **completely innocuous**. It does:
- No persistence
- No shell, no command execution
- Just uploads and accesses a static JSP

Use only on systems you are **authorized** to test.

---

## 📸 Example Output

```bash
[✔] Server appears to support partial PUT!
[✅] Exploit verified: JSP executed successfully.
[URL] http://target:8080/uploads/proof.jsp
[*] Sleeping for 24.0 hours before cleanup...
```

---

## 📦 Packaging for GitHub

- This repo is ready for GitHub publishing.
- Add a license of your choice (e.g. MIT).
- Push with:
  ```bash
  git init
  git add .
  git commit -m "Initial CVE-2025-24813 PoC"
  git remote add origin https://github.com/YOURUSERNAME/cve-2025-24813-poc.git
  git push -u origin main
  ```

---

## 🧼 Cleanup

After 24 hours, the script automatically issues an HTTP `DELETE` to remove the JSP. You can also remove it manually.

---

## 📄 License

MIT or custom license of your choice.

---

## ✉️ Contact

Maintained by [Your Name]. For authorized use only.


## 📛 GitHub Badges

![MIT License](https://img.shields.io/badge/license-MIT-green)
![Python](https://img.shields.io/badge/python-3.7%2B-blue)
![PoC](https://img.shields.io/badge/status-PoC-informational)


---

## 🧩 Full Feature List

- ✅ Interactive CLI for target IP/port input
- ✅ Vulnerability detection via:
  - Partial PUT test
  - Fallback header analysis (`Server: Apache/Tomcat`)
- ✅ User confirmation before exploitation
- ✅ Harmless `proof.jsp` upload with no side effects
- ✅ Live verification via HTTP GET
- ✅ Color-coded terminal output (green, yellow, red)
- ✅ Screenshot capture with `html2image`
- ✅ Auto-cleanup via HTTP DELETE after 24 hours
- ✅ All activity logged to `report.txt`
- ✅ `.gitignore`, `LICENSE`, GitHub badges
- ✅ GitHub Pages + release-ready metadata
- ✅ `setup.sh` for optional environment prep
- ✅ Disclosure template `disclosure.md` for blog/report use
- ✅ GitHub banner image `banner.png`

---

## 🧠 Notes

This project is designed to be shared publicly and used responsibly. If you find it useful, consider starring the repo and contributing via issues or pull requests.

文件快照

 [4.0K]  /data/pocs/65d6ccbcaf80d3b65ce524249f95099c54ce07a6
├── [1.0K]  LICENSE
└── [3.3K]  README.md

0 directories, 2 files

备注