DISCLAIMER: I am not the creator of either CVE, all credit goes to Watchtower and Immersive Labs for the respective CVE work. I just smashed their code together like some child playing with action figures and it happened to work.
---
Quick tool I made that combines the PoC Code for CVE-2025-54309 and CVE-2025-31161 that checks for the race condition vulnerability, creates the backdoor "spiff" user, and pulls a list of users from the instance.
Updated 2025年09月11日 16:29:18 +02:00