shahroodcert/cve-2025-62168Proof-of-concept scanner for CVE-2025-62168, a Squid Proxy information disclosure vulnerability that exposes HTTP authentication credentials, enabling detection and validation of affected configurations.
"Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity:
This problem allows a script to bypass Browser security protections and learn the credentials a trusted client uses to authenticate.
This problem potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing.
These attacks do not require Squid to be configured with HTTP Authentication."
use virtual enviroment & active
pip install -r requirements.txt
python3 main.py
