Azure Storage Resource Provider SSRF Spoofing Vulnerability

This repository provides a proof-of-concept exploit for CVE-2025-29927, a critical vulnerability in Next.js (versions prior to 14.2.25 and 15.2.3) that allows attackers to bypass middleware-based authentication and authorization by injecting a crafted 'x-middleware-subrequest' HTTP header. The main exploit script, 'exploit.py', is a Python tool that allows users to specify a target hostname, port, HTTP method, and path (defaulting to '/protected'). It sends two requests: one normal and one with the malicious header, and checks if protected content can be accessed without proper authentication. The script saves successful responses to 'vuln_middleware.html' for further inspection. The repository is structured with a README (explaining the vulnerability and usage), a license, the exploit script, and a requirements file (listing 'colorama' as a dependency). The exploit is network-based and targets web applications running vulnerable Next.js versions, demonstrating unauthorized access to protected resources.

This repository provides a proof-of-concept exploit for CVE-2025-29927, a critical vulnerability in Next.js (versions prior to 14.2.25 and 15.2.3) that allows attackers to bypass middleware-based authentication and authorization. The main exploit script, 'exploit.py', is a Python tool that sends HTTP requests to a specified target and path, optionally injecting the 'x-middleware-subrequest' header with a value of 'middleware'. This header manipulation exploits the vulnerability, potentially granting unauthorized access to protected resources (such as admin pages or user dashboards) if the target is running a vulnerable Next.js version. The script compares normal and exploit requests, checks for the presence of protected content in the response, and saves successful responses to a local HTML file for analysis. The repository is structured with a single exploit script, a README with usage instructions and vulnerability details, a requirements file for dependencies (colorama), and a license. No hardcoded endpoints are present; the user specifies the target hostname, port, and path. The exploit is network-based and demonstrates the vulnerability's impact but does not provide weaponized or post-exploitation features.