
Vite任意文件读取漏洞批量检测脚本CVE-2025-31486
The vulnerabilities described in this article and their reproduction steps are intended solely for cybersecurity research and educational purposes. No one may use the information provided herein for illegal purposes or unauthorized system testing. The author assumes no responsibility for any direct or indirect damages resulting from the use of this information. If any infringement is involved, please contact us promptly so that we can address and remove the relevant content as soon as possible.
https://pc.fenchuan8.com/#/index?forum=101158&yqm=DGR4X
https://blog.csdn.net/xc_214/article/details/147047575?spm=1001.2014.3001.5501
# Without payload, detects default paths for Linux and Windows by default
# With payload, uses a custom path
Batch detection:
python poc.py -f url.txt -t 5 -p <payload> -o <outPutFile> --proxy
Single detection:
python poc.py -u http://your-ip -t 5 -p <payload> -o <outPutFile> --proxy
