CVE-2025-4427 & CVE-2025-4428 Vulnerability Scanner

Advanced detection tool for identifying systems vulnerable to the CVE-2025-4427 and CVE-2025-4428 exploit chain. This security scanner helps identify vulnerable endpoints and demonstrates proof-of-concept exploitation.

Features

• 🛡️ Vulnerability Detection: Identifies vulnerable systems through signature analysis
• 💻 Command Execution: Allows safe testing of vulnerability via controlled command execution
• 🔄 Retry Mechanism: Automatic retry for failed connections
• 📄 Logging System: Detailed logging with file and console outputs
• 🌐 Proxy Support: Configurable proxy settings for traffic inspection
• 🔧 Multi-Shell Support: Compatible with both bash and sh environments
• 📊 Output Redirection: Save results to external files

Installation

1. Requirements:

   • Python 3.6+
   • requests library

2. Install dependencies:

pip install requests

Usage

Basic Command

python scanner.py -H http://target-site.com/

Full Syntax

python scanner.py -H [TARGET_URL] [OPTIONS]

Options

Examples

1. Basic vulnerability check:

python scanner.py -H https://example.com/

1. Custom command execution with proxy:

python scanner.py -H http://internal-server/ -c "uname -a" -x http://proxy:8080

1. Full test with output redirection:

python scanner.py -H http://test-site.com/ -s sh -t 30 -o results.txt

Important Notes

• 🚨 Legal Compliance: Use only on authorized systems
• 🔒 Security Advisory: For testing purposes only
• ⚠️ Ethical Warning: Do not use for illegal activities
• 📝 Best Practice: Always verify results manually
• 🔍 Accuracy: False positives/negatives possible - use as initial screening tool

Exit Codes

License

Distributed under MIT License. See LICENSE for full text.