git clone <repository-url>
cd CVE-2025-55182/poc
uv run check http://target.com:3000

uv run check <target_url>

# اختبار هدف مع الإعدادات الافتراضية (يختبر نقطة النهاية /formaction)
uv run check http://localhost:3002

# تحديد نقطة نهاية مخصصة
uv run check http://localhost:3002 --endpoint /api/formaction

# اختبار أهداف متعددة من ملف
uv run check --file targets.txt

# حفظ المضيفات المعرضة للخطر في ملف
uv run check --file targets.txt -o vulnerable.txt

# زيادة المهلة للاتصالات البطيئة
uv run check http://localhost:3002 --timeout 15

# تعطيل التحقق من SSL (للشهادات الذاتية)
uv run check http://localhost:3002 --no-ssl-verify

# وضع هادئ (إخراج محدود)
uv run check http://localhost:3002 --quiet

usage: uv run check [-h] [-f FILE] [-e ENDPOINT] [-t TIMEOUT]
                    [--no-ssl-verify] [-q] [-o OUTPUT] [target]

positional arguments:
  target                عنوان URL الهدف (مثل http://target.com:3000)

optional arguments:
  -h, --help            عرض رسالة المساعدة والخروج
  -f, --file FILE       ملف يحتوي على عناوين URL المستهدفة (واحد لكل سطر)
  -e, --endpoint        مسار نقطة النهاية لواجهة API (الافتراضي: /formaction)
  -t, --timeout         مهلة الطلب بالثواني (الافتراضي: 10)
  --no-ssl-verify       تعطيل التحقق من شهادة SSL
  -q, --quiet           وضع هادئ (إخراج محدود)
  -o, --output OUTPUT   ملف الإخراج لكتابة المضيفات المعرضة للخطر

# uv run check http://localhost:3002
======================================================================
CVE-2025-55182 Vulnerability Detector - Enhanced Edition
Multiple Detection Techniques | Comprehensive Coverage
======================================================================

[*] Testing http://localhost:3002/formaction
[*] Testing all detection techniques...
  → Gadget: fs#constructor: ✓ VULNERABLE
  → Gadget: vm#runInThisContext: ✓ VULNERABLE
  → Gadget: child_process#execSync: ✓ VULNERABLE
  → Gadget: module#_load: ✓ VULNERABLE
  → Gadget: fs#readFileSync: ✓ VULNERABLE
  → Gadget: util#promisify: ✗ Not vulnerable
  → Safe Side-Channel Detection: ✗ Not vulnerable
  → RCE PoC (Unix/Linux): ✗ Not vulnerable
  → RCE PoC (Windows): ✗ Not vulnerable
  → RCE with WAF Bypass (Unix/Linux): ✗ Not vulnerable
  → RCE with WAF Bypass (Windows): ✗ Not vulnerable
  → Advanced WAF Bypass (Unix/Linux): ✗ Not vulnerable

======================================================================
DETECTION RESULTS
======================================================================
Target:                  http://localhost:3002
Endpoint:                /formaction
Techniques Tested:       Multiple
Successful Techniques:   5 techniques detected vulnerability

Status:                  ⚠️  VULNERABLE

The target appears to be vulnerable to CVE-2025-55182.

Techniques that detected vulnerability:
 -> Gadget: fs#constructor
 -> Gadget: vm#runInThisContext
 -> Gadget: child_process#execSync
 -> Gadget: module#_load
 -> Gadget: fs#readFileSync

Recommendation: Apply security patches immediately.
======================================================================

# uv run check http://localhost:8000
======================================================================
CVE-2025-55182 Vulnerability Detector - Enhanced Edition
Multiple Detection Techniques | Comprehensive Coverage
======================================================================

[*] Testing http://localhost:8000/formaction
[*] Testing all detection techniques...
  → Gadget: fs#constructor: ✗ Not vulnerable
  → Gadget: vm#runInThisContext: ✗ Not vulnerable
  → Gadget: child_process#execSync: ✗ Not vulnerable
  → Gadget: module#_load: ✗ Not vulnerable
  → Gadget: fs#readFileSync: ✗ Not vulnerable
  → Gadget: util#promisify: ✗ Not vulnerable
  → Safe Side-Channel Detection: ✗ Not vulnerable
  → RCE PoC (Unix/Linux): ✗ Not vulnerable
  → RCE PoC (Windows): ✗ Not vulnerable
  → RCE with WAF Bypass (Unix/Linux): ✗ Not vulnerable
  → RCE with WAF Bypass (Windows): ✗ Not vulnerable
  → Advanced WAF Bypass (Unix/Linux): ✗ Not vulnerable

======================================================================
DETECTION RESULTS
======================================================================
Target:                  http://localhost:8000
Endpoint:                /formaction
Techniques Tested:       Multiple

Status:                  ✓ NOT VULNERABLE

The target does not appear to be vulnerable to CVE-2025-55182.
All detection techniques failed to confirm vulnerability.
======================================================================

# إنشاء ملف مع عناوين URL المستهدفة (واحد لكل سطر)
echo "http://localhost:3002" > targets.txt
echo "http://localhost:8000" >> targets.txt

# تشغيل الفحص الدفعي
uv run check --file targets.txt -o vulnerable.txt

======================================================================
CVE-2025-55182 Vulnerability Detector - Enhanced Edition
Multiple Detection Techniques | Comprehensive Coverage
======================================================================

[*] Loaded 2 target(s) from file

[*] Testing target 1/2
[*] Testing http://localhost:3002/formaction
[*] Testing all detection techniques...
  → Gadget: fs#constructor: ✓ VULNERABLE
  → Gadget: vm#runInThisContext: ✓ VULNERABLE
  [... additional techniques ...]

======================================================================
DETECTION RESULTS
======================================================================
Target:                  http://localhost:3002
Endpoint:                /formaction
Techniques Tested:       Multiple
Successful Techniques:   5 techniques detected vulnerability

Status:                  ⚠️  VULNERABLE
[... details ...]
======================================================================

[*] Testing target 2/2
[*] Testing http://localhost:8000/formaction
[*] Testing all detection techniques...
  → Gadget: fs#constructor: ✗ Not vulnerable
  [... all techniques fail ...]

----------------------------------------------------------------------
Target:                  http://localhost:8000
Endpoint:                /formaction
Techniques Tested:       Multiple

Status:                  ✓ NOT VULNERABLE
----------------------------------------------------------------------

======================================================================
SUMMARY
======================================================================
Total targets tested:  2
Vulnerable:            1
Not vulnerable:        1
======================================================================

[+] Wrote 1 vulnerable host(s) to vulnerable.txt