WSUS-CVE-2025-59287-RCE

WSUS-CVE-2025-59287-RCE is a proof-of-concept exploitation tool for a critical remote code execution vulnerability (CVE-2025-59287) in Microsoft Windows Server Update Services. The tool automates the generation and transmission of a malicious payload that exploits insecure deserialization in the WSUS GetCookie() endpoint, enabling unauthorized execution of arbitrary code with system privileges. Key features include payload generation, AES encryption, and SOAP request construction, facilitating a straightforward reverse shell setup through user input for target and listener configurations.