CVE-2025-52392

This script demonstrates a brute-force attack against Soosyze CMS 2.0 by exploiting missing rate limiting on the login endpoint. It automates POST requests with a wordlist or default passwords to bypass authentication.

This repository contains a functional Bash script that demonstrates a brute-force attack against a login form in Soosyze CMS 2.0, exploiting the lack of rate limiting or other protections. The script automates the process of capturing CSRF tokens, submitting login attempts, and detecting successful authentication via response analysis.