## https://sploitus.com/exploit?id=92AF319D-5818-5A97-9A8F-492C740893F6
# 🚀 SharePoint CVE-2025-53770 RCE Vulnerability Checker
---
## 📌 Overview
A proof-of-concept (PoC) script to detect **CVE-2025-53770** – a Remote Code Execution (RCE) vulnerability in Microsoft SharePoint.
This vulnerability allows attackers to execute arbitrary code on vulnerable SharePoint servers without authentication by abusing misconfigured `_layouts/15/ToolPane.aspx` endpoint.
> ⚠️ **Warning:**
> This PoC is for educational and authorized testing purposes only. Do not use this code on systems you do not own or have explicit permission to assess.
---
---
## 🔍 Technical Details
The vulnerability exists due to improper validation of parameters in SharePoint's ToolPane handler.
By crafting a malicious MSOTlPn_Uri parameter containing server-executable code, an attacker can trigger RCE.
**Vulnerable Endpoint:**
/_layouts/15/ToolPane.aspx?DisplayMode=Edit
**Affected Versions:**
SharePoint Server 2016
SharePoint Server 2019
**Impact:**
- Remote Command Execution (RCE)
---
## 📂 Script Features
- ✅ Single target mode
- ✅ Multiple target mode (bulk scan)
---
## 💻 Usage
```bash
./CVE-2025-53770-Checker.sh
```
---
## Example
**Single target**
./CVE-2025-53770-Checker.sh https://127.0.0.1
**Multiple targets from file**
./CVE-2025-53770-Checker.sh targets.txt
---
## 🧩 How It Works
Input Parsing – Reads target from CLI or file list.
Payload Encoding – Prepares the malicious payload for injection.
Exploit Delivery – Sends the payload to the vulnerable endpoint.
Verification – Confirms if the server executed the injected code.
---
## ⭐ Support
If you find this project useful, consider giving it a star on GitHub!
Security through awareness helps keep systems safe. 🔐
---
## 📜 License
This project is licensed under the MIT License – see the LICENSE file for details.
---