CVE-2025-64459-hunter

Fast network scanner for CVE-2025-64459 (Django SQL Injection vulnerability).

Installation

pip install -r requirements.txt

Usage

# Scan single IP
python cve_2025_64459_hunter.py -t 192.168.1.100

# Scan CIDR range
python cve_2025_64459_hunter.py -t 192.168.1.0/24

# Custom ports
python cve_2025_64459_hunter.py -t 10.0.0.0/24 -p 80,443,8000

# Custom paths
python cve_2025_64459_hunter.py -t 192.168.1.0/24 -P /admin/,/api/

# Adjust concurrency
python cve_2025_64459_hunter.py -t 192.168.1.0/24 -T 200

Options

• -t, --target: Target IP or CIDR range (required)
• -p, --ports: Comma-separated ports (default: 80,443,8000,8080)
• -P, --paths: Comma-separated paths (default: /,/admin/,/api/)
• -T, --threads: Concurrent tasks (default: 100)

CVE-2025-64459

Affects Django 5.2 < 5.2.8, 5.1 < 5.1.14, 4.2 < 4.2.26

Disclaimer

For authorized security research only.