CVE-2025-15480 Ubuntu凭证泄露漏洞

#!/usr/bin/env python3 # Proof of Concept: Simulate checking logs for leaked password hashes import re # Simulated log content that might be found in a Launchpad attachment log_content = """ [INFO] Installation started. [ERROR] Package installation failed. [DEBUG] User config: {'username': 'admin', 'pwd_hash': '$6$rounds=656000$sO...' } [TRACE] Dumping environment for debugging... """ # Regex pattern to detect common Unix password hashes (e.g., SHA-512) # Pattern matches $id$salt$hashed format hash_pattern = re.compile(r'\$[156]\$[a-zA-Z0-9./]+\$[a-zA-Z0-9./]+') matches = hash_pattern.findall(log_content) if matches: print("[!] Potential credential leak detected in log!") for match in matches: print(f"Found Hash: {match}") else: print("[+] No sensitive hashes found in this log segment.")