monzaviman/cve-2025-62168Scanner and proof-of-concept for CVE-2025-62168, detecting Squid Proxy information disclosure that leaks HTTP authentication credentials.
"Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity:
This problem allows a script to bypass Browser security protections and learn the credentials a trusted client uses to authenticate.
This problem potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing.
These attacks do not require Squid to be configured with HTTP Authentication."
use virtual enviroment & active
pip install -r requirements.txt
python3 main.py
