chessredoffsec/cve-2023-26208Python script with GUI for automated payload testing against login endpoints, designed for educational exploitation simulation and vulnerability analysis.
CVE-2023-26208
Exploit Automation (For Educational Purposes) 🚨
📌 Description
This is a Python script with a graphical interface (Tkinter) that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze potential failures.
⚠️ This code is strictly for educational and learning purposes. Misuse may be illegal and against security policies. The author is not responsible for any inappropriate use.
🛠 Features
✅ Allows entering a target IP and defining the payload size. ✅ Sends automated requests to the /logincheck endpoint. ✅ Start and stop button to control the tests. ✅ Uses threads to run in parallel without freezing the interface. ✅ Checks if the IP is valid before starting.
📋 Installation and Usage
🔧 **Prerequisites
Python 3.x installed
requests library installed
tkinter library (native on Python)
📥 Install Dependencies
pip install requests
▶️ Run the Script
Save the code as exploit.py and run:
python exploit.py
⚙️ How It Works?
1️⃣ Type the target server IP in the corresponding field. 2️⃣ Choose the payload size (amount of injected characters). 3️⃣ Click "Start Exploit" to begin sending requests. 4️⃣ The script will send packets continuously until you click "Stop Exploit". 5️⃣ Request statuses will be displayed in the terminal.
⚠️ Legal Disclaimer
This project is for learning and testing only in authorized environments. Unauthorized use of this script against third-party systems may be illegal and result in legal penalties.
The author is not responsible for any inappropriate use. Use ethically and responsibly.
