chessredoffsec/cve-2022-29056Automated Python script with GUI for testing login endpoint responses with configurable payload sizes, designed for educational security testing and vulnerability analysis.
CVE-2022-29056
Exploit Automation (For Educational Purposes) 🚨
📌 Description
This is a Python script with a graphical interface (Tkinter) that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze potential failures.
⚠️ This code is strictly for educational and learning purposes. Misuse may be illegal and violate security policies. The author is not responsible for any inappropriate use.
🛠 Features
✅ Allows entering a target IP and defining the payload size. ✅ Sends automated requests to the /logincheck endpoint. ✅ Start and stop button to control the tests. ✅ Uses Threads to run in parallel without freezing the interface. ✅ Checks if the IP is valid before starting.
📋 Installation and Usage
🔧 **Prerequisites
Python 3.x installed
requests library installed
tkinter library (native in Python)
📥 Install Dependencies
pip install requests
▶️ Run the Script
Save the code as exploit.py and execute:
python exploit.py
⚙️ How It Works?
1️⃣ Enter the target server IP in the corresponding field. 2️⃣ Choose the payload size (number of injected characters). 3️⃣ Click "Start Exploit" to begin sending requests. 4️⃣ The script will send packets continuously until you click "Stop Exploit". 5️⃣ Request statuses will be displayed in the terminal.
⚠️ Legal Disclaimer
This project is only for learning and testing in authorized environments. Unauthorized use of this script against third-party systems may be illegal and result in legal penalties.
The author is not responsible for any inappropriate use. Use ethically and responsibly.
