CVE-2025-30208 Detection Tool

Vulnerability Analysis

CVE-2025-30208 is an arbitrary file read vulnerability in the Vite development server. Attackers can read sensitive server files (such as /etc/passwd or C:\windows\win.ini) by constructing special paths (e.g., @fs prefix). This tool supports single-target detection, system information probing, and deep environment analysis, and provides a proxy function to adapt to complex network environments.

Features

• Single-target detection: Specify a single target URL via command line parameters for vulnerability verification.
• System information probing: Supports basic system probing (OS type, working directory) and enterprise-level deep detection (user privileges, Web service configuration, cloud environment fingerprints).
• Proxy support: Supports sending requests through HTTP/HTTPS proxies, facilitating debugging or bypassing network restrictions.
• Cross-platform compatibility: Supports detection of sensitive files on Linux and Windows systems.
• Risk rating: Automatically generates risk reports and security recommendations in deep detection mode.

Usage

Install Dependencies

Ensure Python 3 and the requests library are installed. Installation command:

pip install requests

Command Line Arguments

python CVE-2025-30208.py -h

Parameter Description

Examples

1. Basic detection (default reads /etc/passwd or C:/windows/win.ini)

   root@kitploit:~

   python CVE-2025-30208.py -u http://example.com
   

2. Specify file path to read

   root@kitploit:~

   python CVE-2025-30208.py -u http://example.com -r /etc/shadow
   

3. Enable basic system probing

   root@kitploit:~

   python CVE-2025-30208.py -u http://example.com -i
   

4. Enable deep detection and set proxy

   root@kitploit:~

   python CVE-2025-30208.py -u http://example.com -d -p http://127.0.0.1:8080
   

Output Description

• Vulnerability verification result
  If the vulnerability exists, the tool displays the read file content (first 500 characters) and marks it as high risk. ![Detection result example]

• Basic system probing
  Outputs OS type, working directory, container environment, etc.

• Deep detection report
  Generates enterprise-level risk ratings (Low/Medium/High), and lists detailed information such as sensitive configurations, SSH public keys, environment variables, etc.

Important Notes

1. Legality statement
   You must obtain legal authorization for the target system before use. Unauthorized testing may violate laws and regulations.

Disclaimer

This tool is only for authorized security testing. Users assume all risks, and the author is not responsible for any misuse.

Note: Ensure compliance with local laws and regulations during actual use. Unauthorized testing is prohibited.