## https://sploitus.com/exploit?id=20F1FE36-E81B-593E-8C49-91F1DB7E6DFB
# CVE-2025-30208 Detection Tool
# Vulnerability Analysis
[Vite Arbitrary File Reading Vulnerability Analysis (CVE-2025-30208)](https://www.xaitx.com/tech/2025-03-26.html)
## Introduction
This tool is used to detect whether the target system has the **CVE-2025-30208** vulnerability. This vulnerability allows attackers to read sensitive files on the server through a specific path (e.g., `/etc/passwd` or `C:\windows\win.ini`). The tool supports single URL detection and batch detection, and can optionally use an HTTP/HTTPS proxy. Here, the relationship between payloads like `?raw??` and `?import?raw??` is explained. The first payload is designed for reading files without suffixes; the second one is more flexible. ---
## Features
- **Single-target detection**: Specifies a single target URL for vulnerability detection using command-line parameters.
- **Batch detection**: Supports reading multiple target URLs from a file for batch detection.
- **Proxy support**: Allows sending requests via HTTP/HTTPS proxies for debugging or bypassing network restrictions.
- **Cross-platform support**: Can detect sensitive files on both Linux and Windows systems. ---
## Nuclei
The payload is named `CVE-2025-30208.yaml`, and it can be directly used with Nuclei for detection. You can also use Yakit for detection. The template source is `nuclei-templates`, available at: https://github.com/projectdiscovery/nuclei-templates/pull/11828/files
## Usage
### Install dependencies
Before running the tool, make sure that Python 3 and the `requests` library are installed. If you haven’t installed `requests`, you can install it using the following command:
```bash
pip install requests
```
### Command-line parameters
```bash
python cve_2025_30208_checker.py [-u URL | -f FILE] [-p PROXY]
```
#### Parameter descriptions
| Parameter | Abbreviation | Description |
|-----------|--------------|-------------|
| `-u` | `-u` | Specifies a single target URL for vulnerability detection. |
| `-f` | `-f` | Specifies a file path containing multiple target URLs, with one URL per line. |
| `-p` | `-p` | Optional parameter, specifies the HTTP/HTTPS proxy address (e.g., `http://127.0.0.1:8080`). |
#### Examples
1. **Single-target detection**
```bash
python cve_2025_30208_checker.py -u http://example.com
```
2. **Batch detection**
Create a file containing target URLs (e.g., `targets.txt`), with one URL per line:
```
http://example1.com
http://example2.com
http://example3.com
```
Then run the following command:
```bash
python cve_2025_30208_checker.py -f targets.txt
```
3. **Using a proxy**
If you need to send requests via a proxy, add the `-p` parameter:
```bash
python cve_2025_30208_checker.py -u http://example.com -p http://127.0.0.1:8080
```
---
## Output results
- If the target system has a vulnerability, the tool will output the target URL and the content of the detected sensitive files.
- If the target system does not have a vulnerability, the tool will not output any information.
- During batch detection, the tool will read each URL in the file line by line and output the detection results.
## Notes
1. **Legal disclaimer**
Make sure you have legal authorization to access the target system. Unauthorized vulnerability detection may violate relevant laws.
2. **SSL verification**
The tool disables SSL verification (`verify=False`) by default to avoid request failures due to certificate issues. If you need to enable SSL verification, change `verify=False` to `verify=True` in the code.
3. **Proxy configuration**
If you use a proxy, ensure that the proxy service is running properly, and adjust the proxy protocol (e.g., `http` or `socks5`) according to your needs.
4. **File format**
During batch detection, make sure the URL format in the input file is correct, and each line contains only one URL. ---
## Contributions and feedback
If you find any issues or want to improve this tool, please submit an Issue or Pull Request. We welcome contributions in any form! ---
## Disclaimer
This tool is intended for security research and legitimate penetration testing purposes only. The author assumes no responsibility for any illegal use of this tool. Please comply with relevant laws. ---
[source-iocs-preserved url=http://127.0.0.1:8080`）。]