🛡️ CVE-2025-53770 SharePoint Vulnerability Scanner

A Python-based tool to detect vulnerable Microsoft SharePoint instances affected by CVE-2025-53770, an insecure deserialization vulnerability triggered via the ToolPane.aspx endpoint. The scanner sends a crafted, compressed ViewState payload to determine if the target leaks internal serialized objects.

🚀 Features

• ✅ Detects SharePoint instances vulnerable to CVE-2025-53770
• ✅ Supports scanning a single target or bulk URLs from a file
• ✅ Uses a safe Scorecard:ExcelDataSet test payload
• ✅ Decodes and decompresses reflected base64+gzip ViewState data
• ✅ Minimal dependencies and works with standard tools (curl, base64, gzip)
• ✅ Colored CLI output for easy identification

📖 CVE Details

• CVE: CVE-2025-53770
• Component: Microsoft SharePoint (ToolPane.aspx)
• Vulnerability Type: Insecure Deserialization / Unsafe ViewState Reflection
• Severity: High – May lead to sensitive data disclosure or remote code execution (RCE)
• Test Marker: IntruderScannerDetectionPayload, ExcelDataSet, divWaiting, ProgressTemplate, Scorecard

🧑‍💻 Usage

# Scan a single SharePoint URL
python3 CVE-2025-53770_Scanner.py -u https://target.sharepoint.com

# Scan multiple URLs from a file
python3 CVE-2025-53770_Scanner.py -f targets.txt

Example targets.txt file:

https://intranet.company.com
https://sharepoint.university.edu
https://portal.corporate.net

📦 Requirements

• Python 3.x
• curl, base64, gzip installed and available in system path
• Python module: colorama

Install the Python dependency:

pip install colorama

🔍 Sample Output

[>] Scanning: https://vulnerable.sharepoint.com
[VULNERABLE] https://vulnerable.sharepoint.com returned payload marker!

📝 License

This project is licensed under the MIT License.

👤 Author

Ahmed Tamer Cybersecurity Researcher | Bug Hunter | Red Teamer

• 💼 LinkedIn

⚠️ Ethical Disclaimer

This tool is developed for educational and authorized security testing purposes only. You are not allowed to use this tool against systems you do not own or lack explicit permission to test. Misuse of this software may result in criminal charges — use responsibly and ethically.