-cve-2025-55182

CVE-2025-55182 Mass / Single URL Detection Script

image An efficient CVE-2025-55182 vulnerability detection tool, supporting single URL quick detection and batch URL detection, automatically generating detailed Excel detection reports, and outputting complete log files. 🔥 Core Features

• Supports single URL detection (-u) and batch URL file detection (-f), with mutually exclusive yet easy-to-use parameters
• Separately tests Linux/Windows system payloads, verifies vulnerability validity based on random number calculations
• Accurately detects core features such as X-Action-Redirect/X-Middleware-Rewrite response headers and 303 status codes
• Strictly uses Prepared Request to control request format, preventing requests from automatically modifying headers
• Generates detailed Excel reports including detection system, expected results, and response headers for easy analysis and archiving
• Outputs complete log files recording detection process and exception information for troubleshooting

📋 Environment Preparation

1. Python Version Requirements Python 3.6 or above
2. Install Dependencies

pip install requests openpyxl urllib3

🚀 Quick Start

1. Single URL Detection

# Basic single URL detection
python3 cve-2025-55182-scan.py -u https://example.com

# Single URL + proxy + 20-second timeout
python3 cve-2025-55182-scan.py -u https://example.com -p http://127.0.0.1:8080 -t 20

# Single URL, test only Linux system + enable debug logging
python3 cve-2025-55182-scan.py -u https://example.com -s -v

2. Batch URL Detection Step 1: Prepare URL list file Create a text file (e.g., urls.txt), with one URL per line. Supports the following formats:

# urls.txt example
https://www.example.com
http://192.168.1.100:8080
test.com/admin
10.0.0.5

Step 2: Execute batch detection

# Basic batch detection
python3 cve-2025-55182-scan.py -f urls.txt

# Batch + proxy + 20-second timeout
python3 cve-2025-55182-scan.py -f urls.txt -p http://127.0.0.1:8080 -t 20

📖 Parameter Description

📊 Output Description

1. Log File After the script runs, it automatically generates a log file named in the format: CVE-2025-55182检测日志_YYYYMMDD_HHMMSS.log, containing:

   • Detailed record of detection process
   • Exception information (timeout, connection failure, DNS resolution error, etc.)
   • Detection result statistics

2. Excel Report

   • Single URL detection: generates CVE-2025-55182单URL检测报告_YYYYMMDD_HHMMSS.xlsx
   • Batch detection: generates CVE-2025-55182批量检测报告_YYYYMMDD_HHMMSS.xlsx

   The Excel report contains the following fields: | Field | Description | |:---:|---| | No. | Detection item number | | Original URL | Input URL to be tested | | Test URL | Actual concatenated test URL used by the script | | Vulnerability exists? | Detection result (Yes / No / Unknown) | | Detection time (seconds) | Time consumed for a single detection | | Response status code | HTTP status code returned by the target | | Detection system | System associated with the vulnerability (Linux/Windows/unknown) | | Random number 1/2 | Random numbers used for verification | | Expected calculation result | Result of random1 × random2 (core basis for vulnerability verification) | | X-Action-Redirect | Content of X-Action-Redirect response header returned by the target | | X-Middleware-Rewrite | Content of X-Middleware-Rewrite response header returned by the target | | Detection details | Detailed detection information (status code, header match result, exception info) |

⚠️ Precautions

• Legality: Only test targets with legal authorization. Unauthorized penetration testing is prohibited. Violators bear legal responsibility.
• Network environment: Ensure the script-running device can access the target URL. If the target has firewall/protection policies, adjust network rules accordingly.
• Permission notes: Generating Excel and log files requires read/write permissions in the current directory. If prompted insufficient permissions, switch directories or elevate permissions.
• Timeout adjustment: If target network latency is high, increase the -t parameter value appropriately (e.g., 30 seconds) to avoid false timeout judgments.
• Proxy usage: If the target requires proxy access, ensure the proxy address is valid and has no access restrictions.
• Result reference: Detection results are for reference only. Actual vulnerability verification should combine business scenarios and manual verification.

📄 Copyright Information

• Author: Call123X 酷酷
• Project URL: https://github.com/Call123X/-cve-2025-55182/
• License: MIT License

❓ FAQ

• Q1: Prompt: "URL file does not exist" A1: Check the path of the URL list file specified by the -f parameter. Ensure the file exists and the path has no special characters.
• Q2: Excel report cannot be opened A2: Possibly the report generation was interrupted, or the Excel program has the file open. Close it and try again.
• Q3: Many "Connection refused" errors A3: The target port is not open, or the target server blocked the script's request. Confirm the target's alive status.
• Q4: Detection result "Unknown" A4: An uncaught exception occurred during script execution. Use the -v parameter to enable debug logs and identify the specific cause.
• Q5: SSL certificate error A5: The target's SSL certificate is invalid or expired. The script has disabled SSL warnings; this does not affect detection, but the target's legitimacy should be confirmed.