Bludit Bruteforce Mitigation Bypass Script

Overview

This script is a refurbished Bash implementation of an exploit targeting the Bludit CMS version <= 3.9.2. It leverages a vulnerability (CVE-2019-17240) that allows brute-forcing passwords by bypassing the CSRF token-based protection.

The original Python script was written by ColdFusionX (Mayank Deshmukh) and is adapted here for Bash users with enhanced usability and progress tracking.

Vulnerability Details

• Discoverer: Rastating
• CVE: CVE-2019-17240
• References:
  • Bludit Brute Force Mitigation Bypass
  • Patch Details
• Description: The issue lies in how CSRF tokens are generated and validated in the login process, enabling attackers to brute-force credentials while bypassing mitigation mechanisms.

Features

• Bruteforce Attack: Attempts to brute-force the login page by leveraging the vulnerability.
• CSRF Token Handling: Dynamically fetches and uses CSRF tokens to bypass protections.
• Progress Tracking: Displays a progress bar to monitor the brute-force attempt.
• User-Agent Customization: Sends requests with a spoofed User-Agent.

Prerequisites

• Dependencies:
  • curl: For sending HTTP requests.
  • Bash shell.
• Tested Environment: Linux OS with Bash.

Usage

Provide the Execution permissions:

chmod +x CVE-2019-17240

Run the script with the required arguments:

bash CVE-2019-17240 -u <url> -U <username> -w <passwordfile>

Parameters

Example

bash CVE-2019-17240 -u http://example.org/admin/login -U admin -w passwords.txt

Script Workflow

1. Command-line Argument Parsing:
   • Extracts the login URL, username, and password file.
2. CSRF Token Extraction:
   • Dynamically fetches the CSRF token from the login page using curl.
3. Login Attempts:
   • Sends HTTP POST requests with the extracted CSRF token and a password from the list.
   • Tracks and displays the current password attempt and progress.
4. Success Detection:
   • Checks for successful login by detecting a redirect to the admin dashboard.

Limitations

• Requires a valid URL and username.
• Password file should be pre-prepared and comprehensive.

Credits

• Original Exploit Author: ColdFusionX (Website)
• Discoverer of Vulnerability: Rastating (Website)
• Adapted Script: Refurbished by [0xdtc] Bulit in BASH

Disclaimer

This script is for educational purposes only. Unauthorized use of this tool against systems you do not own or have explicit permission to test is illegal and unethical. Use responsibly.