netvanguard-cmd/cve-2025-11371Proof-of-concept exploit for CVE-2025-11371, an unauthenticated Local File Inclusion in Gladinet CentreStack and TrioFox, enabling remote file retrieval and potential RCE via deserialization.
This repository contains a proof-of-concept exploit for CVE-2025-11371, an unauthenticated Local File Inclusion (LFI) vulnerability in Gladinet CentreStack and TrioFox. The exploit allows remote retrieval of sensitive system files, such as the Web.config, which can expose machine keys leading to further RCE via deserialization flaws like CVE-2025-30406.
Affected versions: All versions up to and including 16.7.10368.56560.
pip install -r requirements.txt)pip install -r requirements.txtpython exploit.py --target <target_url> --file "/path/to/Web.config"Options:
--target: URL of the vulnerable CentreStack/TrioFox instance.--file--proxy: Optional HTTP proxy for anonymization.The vulnerability stems from improper input validation in the UploadDownloadProxy component's temp handler. The exploit crafts a specially formed request to the endpoint, appending traversal sequences to reach outside the web root.
Tested against a default CentreStack setup on Windows Server 2019. Successful file reads include:
For any inquiries, please email me at: [email protected]