Arbitrary File Write in Samsung MagicINFO 9 Server

This repository is a small standalone Python exploit for Samsung MagicINFO 9 Server targeting CVE-2025-4632. The repo contains three files: a GPL license, a README with vulnerability description and usage examples, and one executable script, exploit_magicinfo.py. The Python script is the only code file and serves as the main entry point. The exploit’s purpose is to replicate an unauthenticated path traversal file upload against the MagicINFO SWUpdateFileUploader servlet. It constructs a POST request to /MagicInfo/servlet/SWUpdateFileUploader and abuses the fileName parameter with the traversal string ./../../../../../../server/{filename}. Additional parameters deviceType, deviceModelName, and swVer are populated with randomized values to resemble a legitimate device software update request. The request body contains arbitrary attacker-supplied data, allowing the operator to write any chosen file content. After sending the upload request, the script performs a verification GET request to /MagicInfo/{filename}. If the file is reachable, the script reports success and prints a short response snapshot. For non-server-side files it checks whether the uploaded content is reflected; for JSP files it assumes server-side execution may alter the response. This makes the exploit more than a detector: it actively attempts exploitation and confirms impact. The README states the target is Samsung MagicINFO 9 Server before version 21.1052 and describes the issue as arbitrary file write with SYSTEM authority leading to RCE. It also includes multiple example payloads, including a benign JSP execution test and several JSP command shells. Those examples show the intended post-exploitation outcome: remote command execution via uploaded web shells. Although the Python script itself only uploads arbitrary content and verifies accessibility, the documented usage clearly demonstrates how it can be used to achieve RCE by uploading executable JSP payloads. Overall, this is a functional standalone exploit/replication script with operational capability: it automates exploitation of the vulnerable servlet, supports arbitrary file content, and verifies successful placement in a web-accessible path. It is not part of a larger exploit framework.