{"uuid": "a60046da-71c9-47c0-b69a-d42708b8fdb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9248", "type": "seen", "source": "https://t.me/hacking_Attack/96521", "content": "rving for a cryptographic product, and if found checking it for known secrets (against all modules): python examples/cli.py --url http://example.com/contains_bad_secret.htmlYou can also set a custom user-agent with \u2013user-agent \u201cuser-agent string\u201d or a proxy with \u2013proxy http://127.0.0.1 in this mode.\n\nExample output:\n$ python examples/cli.py eyJhbGciOiJIUzI1NiJ9.eyJJc3N1ZXIiOiJJc3N1ZXIiLCJVc2VybmFtZSI6IkJhZFNlY3JldHMiLCJleHAiOjE1OTMxMzM0ODMsImlhdCI6MTQ2NjkwMzA4M30.ovqRikAo_0kKJ0GVrAwQlezymxrLGjcEiW_s3UJMMCo\nbadsecrets - example command line interface ***********************\nKnown Secret Found!\n\nDetecting Module: Generic_JWT\n\nSecret: 1234\nDetails: {'Issuer': 'Issuer', 'Username': 'BadSecrets', 'exp': 1593133483, 'iat': 1466903083, 'jwt_headers': {'alg': 'HS256'}} *********************** Blacklist3r.pyBad secrets includes a fully functional CLI example which replicates the functionality of blacklist3r in python examples/blacklist3r.\npython examples/blacklist3r.py --url http://vulnerablesite/vulnerablepage.aspx\npython examples/blacklist3r.py --viewstate /wEPDwUJODExMDE5NzY5ZGQMKS6jehX5HkJgXxrPh09vumNTKQ== --generator EDD8C9AE Telerik_knownkey.pyFully functional CLI example for identifying known Telerik Hash keys and Encryption keys for Post-2017 versions (those patched for CVE-2017-9248), and brute-forcing version / generating exploitation DialogParameters values. python examples/telerik_knownkey.py --url http://vulnerablesite/Telerik.Web.UI.DialogHandler.aspxOptionally include ASP.NET MachineKeys with \u2013machine-keys (Will SIGNIFICANTLY increase brute-forcing time) Symfony_knownkey.pyBrute-force detection of Symfony known secret key when \u201c_fragment\u201d URLs are enabled, even when no example URL containing a hash can be located. Relevent Blog Post. python examples/symfony_knownkey.py --url https://localhost/See Also: Write up: Find hidden and encrypted secrets from any website BBOT ModuleOne of the best ways to use Badsecrets, especially for the ASPNET_Viewstate and Jsf_viewstate modules is with the Badsecrets BBOT\u00a0module. This will allow you to easily check across thousands of systems in conjunction with subdomain enummeration. bbot -f subdomain-enum -m badsecrets -t evil.corphttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/227044294-59e0408e-c55f-481a-a494-7ee5dd0a39be-1024x209.png Basic library usageSee if a token or other cryptographic product was produced with a known key\nfrom badsecrets import modules_loaded Django_SignedCookies = modules_loaded[\"django_signedcookies\"] ASPNET_Viewstate = modules_loaded[\"aspnet_viewstate\"] Flask_SignedCookies = modules_loaded[\"flask_signedcookies\"] Peoplesoft_PSToken = modules_loaded[\"peoplesoft_pstoken\"] Telerik_HashKey = modules_loaded[\"telerik_hashkey\"] Telerik_EncryptionKey = modules_loaded[\"telerik_encryptionkey\"] Rails_SecretKeyBase = modules_loaded[\"rails_secretkeybase\"] Generic_JWT = modules_loaded[\"generic_jwt\"] Jsf_viewstate = modules_loaded[\"jsf_viewstate\"] Symfony_SignedURL = modules_loaded[\"symfony_signedurl\"] x = ASPNET_Viewstate() print(f\"###{str(x.__class__.__name__)}###\") r = x.check_secret(\"AgF5WuyVO11CsYJ1K5rjyuLXqUGCITSOapG1cYNiriYQ6VTKochMpn8ws4eJRvft81nQIA==\",\"EDD8C9AE\") if r: print(r) else: print(\"KEY NOT FOUND :(\") x = Telerik_HashKey() print(f\"###{str(x.__class__.__name__)}###\") r = x.check_secret(\"vpwClvnLODIx9te2vO%2F4e06KzbKkjtwmNnMx09D1Dmau0dPliYzgpqB9MnEqhPNe3fWemQyH25eLULJi8KiYHXeHvjfS1TZAL2o5Gku1gJbLuqusRXZQYTNlU2Aq4twXO0o0CgVUTfknU89iw0ceyaKjSteOhxGvaE3VEDfiKDd8%2B9j9vD3qso0mLMqn%2Btxirc%2FkIq5oBbzOCgMrJjkaPMa2SJpc5QI2amffBJ%2BsAN25VH%2BwabEJXrjRy%2B8NlYCoUQQKrI%2BEzRSdBsiMOxQTD4vz2TCjSKrK5JEeFMTyE7J39MhXFG38Bq%2FZMDO%2FETHHdsBtTTkqzJ2odVArcOzrce3Kt2%2FqgTUPW%2BCjFtkSNmh%2FzlB9BhbxB1kJt1NkNsjywvP9j7PvNoOBJsa8OwpEyrPTT3Gm%2BfhDwtjvwpvN7l7oIfbcERGExAFrAMENOOt4WGlYhF%2F8c9NcDv0Bv3YJrJoGq0rRurXSh9kcwum9nB%2FGWcjPikqTDm6p3Z48hEnQCVuJNkwJwIKEsYxJqCL95IEdX3PzR81zf36uXPlEa3YdeAgM1RD8YGlwlIXnrLhvMbRvQW0W9eoPzE%2FjP6[...]", "creation_timestamp": "2026-09-01T20:01:00.863757Z"}