Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-30208 — CVE-2025-30208 检测工具。python script && nuclei template | Kitploit
Tools/GitHubGitHub/lusensec/cve-2025-30208
Vulnerability ScannersExploitationWeb Application ExploitationInformation GatheringWeb SecurityPenetration Testing
GitHublusensec/cve-2025-30208

CVE-2025-30208

CVE-2025-30208 检测工具。python script && nuclei template

View Repository
11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-30208 Detection Tool

Vulnerability Analysis

Vite Arbitrary File Read Vulnerability Analysis and Reproduction (CVE-2025-30208)

Introduction

This tool is used to detect whether a target system is vulnerable to CVE-2025-30208. This vulnerability allows an attacker to read sensitive files (such as /etc/passwd or C:\windows\win.ini) on the server via a specific path. The tool supports single URL detection and batch detection, with optional HTTP/HTTPS proxy support.

Here is an introduction to the relationship between the payloads ?raw?? and ?import?raw??. The first payload is suitable for reading files without an extension, the second is more flexible.

Features

  • Single target detection: Specify a single target URL via command-line parameters for vulnerability detection.
  • Batch detection: Read multiple target URLs from a file for batch detection.
  • Proxy support: Send requests through an HTTP/HTTPS proxy, useful for debugging or bypassing network restrictions.
  • Cross-platform support: Simultaneously detect sensitive files on Linux and Windows systems.

    • Nuclei

    The payload is CVE-2025-30208.yaml, which can be used directly with nuclei for detection. Alternatively, you can use yakit for detection.

    The template source is from nuclei-templates, URL: https://github.com/projectdiscovery/nuclei-templates/pull/11828/files

    Usage

    Install Dependencies

    Before running the tool, ensure that Python 3 and the requests library are installed. If requests is not installed, install it with the following command:

    root@kitploit:~
    pip install requests

    Command-Line Arguments

    root@kitploit:~
    python cve_2025_30208_checker.py [-u URL | -f FILE] [-p PROXY]

    Parameter Description

    ParameterAbbreviationDescription
    --url-uSpecify a single target URL for vulnerability detection.
    --file-fSpecify the path to a file containing multiple target URLs, one per line.
    --proxy-pOptional parameter to specify an HTTP/HTTPS proxy address (e.g., http://127.0.0.1:8080).

    Examples

    1. Single target detection

      root@kitploit:~
      python cve_2025_30208_checker.py -u http://example.com

    img.png

    1. Batch detection

      Create a file containing target URLs (e.g., targets.txt), one per line:

      root@kitploit:~
      http://example1.com
http://example2.com
http://example3.com

      Then run:

      root@kitploit:~
      python cve_2025_30208_checker.py -f targets.txt

    2. Using a proxy

      If you need to send requests through a proxy, add the -p parameter:

      root@kitploit:~
      python cve_2025_30208_checker.py -u http://example.com -p http://127.0.0.1:8080

    Output

    • If the target is vulnerable, the tool will output the target URL and the content of the sensitive file read.
    • If the target is not vulnerable, the tool will output nothing.
    • In batch detection mode, the tool reads URLs from the file line by line and outputs the detection results.

    Notes

    1. Legal Disclaimer
      Ensure you have legal authorization to test the target system. Unauthorized vulnerability detection may violate applicable laws and regulations.

    2. SSL Verification
      The tool disables SSL verification by default (verify=False) to avoid request failures due to certificate issues. To enable SSL verification, change verify=False to verify=True in the code.

    3. Proxy Configuration
      If using a proxy, ensure the proxy service is running correctly and adjust the proxy protocol (e.g., http or socks5) as needed.

    4. File Format
      For batch detection, ensure the input file contains properly formatted URLs, with one URL per line.

    Contributions and Feedback

    If you find any issues or wish to improve this tool, please submit an Issue or Pull Request. We welcome any form of contribution!

    Disclaimer

    This tool is intended for security research and authorized penetration testing only. The author is not responsible for any illegal use. Please comply with applicable laws and regulations.

    Hopefully this template meets your needs! If you have any other requirements, feel free to let us know.

    Download Tool