CVE-2025-49132 - Pterodactyl Panel Configuration Information Scanning Tool

This tool is used to scan Pterodactyl panel instances and attempt to obtain their database configuration information. By exploiting a specific path traversal vulnerability, sensitive configuration data of the panel can be obtained.

Project Overview

This project is a high-performance HTTP request tool specifically designed to detect and collect configuration information of Pterodactyl panel instances exposed on the public internet. It sends specific requests to the target server, checks whether the response contains database configuration information, and saves the results by category.

Features

Main Features

• Multi-mode execution: Supports three execution modes: single-threaded, multi-threaded, and asynchronous
• Intelligent classification: Automatically classifies results into two categories: "correct" (contains target data) and "incorrect" (does not contain target data or the request failed)
• Automatic saving: Automatically saves to different directories based on the result type
• Performance monitoring: Displays execution progress and statistics in real time
• Proxy support: Supports sending requests through a proxy
• Error retry: Automatically retries failed requests
• Result analysis: Automatically analyzes database configuration information in the response data

Technical Features

• Uses the requests library for HTTP requests
• Uses aiohttp to implement asynchronous request support
• Uses ThreadPoolExecutor to implement multithreaded processing
• Supports JSON data parsing and analysis
• Has a complete error handling mechanism

Directory Structure

.
├── main.py              # 主程序文件
├── url.txt              # 目标主机列表文件
├── json/                # 输出目录
│   ├── ✔️正确/           # 包含目标数据的结果保存目录
│   └── ❌错误/           # 错误或无效结果保存目录
└── README.md            # 项目说明文档

Install Dependencies

Before running the program, you need to install the required Python libraries:

pip install requests aiohttp urllib3

Usage

Basic Usage

python main.py

By default, it reads the host list from the url.txt file and processes it in multithreaded mode.

Command-line arguments

python main.py [--file FILE] [--mode MODE] [--workers WORKERS]

参数说明：

• -f, --file: 指定主机列表文件路径（默认: url.txt）
• -m, --mode: 执行模式，可选值: threading(多线程), async(异步), single(单线程)（默认: threading）
• -w, --workers: 工作线程数（默认: 5）

示例

# 使用默认设置
python main.py

# 指定自定义主机文件
python main.py --file hosts.txt

# 使用异步模式处理
python main.py --mode async

# 使用单线程模式
python main.py --mode single

# 设置工作线程数为10
python main.py --workers 10

Configuration

The following settings can be modified in the Config class in the main.py file:

• PROXY: Proxy server address (default: http://127.0.0.1:7899)
• TIMEOUT: Request timeout (default: 30 seconds)
• MAX_RETRIES: Maximum number of retries (default: 3)
• MAX_WORKERS: Maximum number of worker threads (default: 5)
• USER_AGENT: Request User-Agent (default: Mozilla/5.0 Windows AppleWebKit/537.36)

How It Works

1. The program reads the host list from the specified file
2. It sends an HTTP GET request to the /locales/locale.json path for each host
3. The request parameters are set as follows:
   • locale: ../../../pterodactyl
   • namespace: config/database
4. It analyzes the response data to check whether it contains database configuration information
5. Based on the result type, the data is saved to the corresponding directory:
   • Contains target data: json/✔️正确/
   • Does not contain target data or the request failed: json/❌错误/
6. Execution progress and statistics are displayed in real time

Output Format

Results are saved in JSON format and contain the following information:

• success: Whether the request succeeded
• status_code: HTTP status code
• response_time: Response time
• url: The actual request URL
• headers: Response header information
• data: Response data
• size: Response size
• contains_target_data: Whether it contains target data
• database_info: Extracted database information

Notes

1. Please ensure you comply with relevant laws and regulations, and use this tool only in authorized environments
2. Before use, modify the proxy configuration to suit your network environment
3. A large number of requests may put pressure on the target server, so set the number of threads appropriately
4. The saved results may contain sensitive information, so keep them secure

Statistics

After execution completes, the program displays detailed statistics:

• Total requests
• Successful requests
• Failed requests
• Number of target data found
• Success rate
• Target data discovery rate
• Total execution time
• Requests per second