CVE-2025-55263: HCL Aftermarket DPC 硬编码敏感信息漏洞

import sys import re def scan_source_code(file_path): """ This script simulates scanning a source file for hardcoded secrets. It looks for patterns like 'password = ...' or 'api_key = ...'. """ try: with open(file_path, 'r', errors='ignore') as f: content = f.read() # Define patterns for hardcoded secrets patterns = { 'Password': r'password\s*=\s*["\']([^"\']+)["\']', 'API Key': r'api[_-]?key\s*=\s*["\']([^"\']+)["\']', 'Secret Token': r'secret[_-]?token\s*=\s*["\']([^"\']+)["\']' } print(f"[*] Scanning {file_path} for hardcoded secrets...") found = False for name, pattern in patterns.items(): matches = re.findall(pattern, content, re.IGNORECASE) if matches: found = True print(f"[+] Found {name}:") for match in matches: print(f" - {match}") if not found: print("[-] No hardcoded secrets detected.") except FileNotFoundError: print(f"[!] Error: File '{file_path}' not found.") if __name__ == "__main__": if len(sys.argv) != 2: print("Usage: python3 poc_scanner.py <path_to_file>") else: scan_source_code(sys.argv[1])