1. Burp Suite must be opened before running here (!!)

And the default Burp Suite port must be 8080. If it is different, you can change it yourself.

2. Download the required libraries

pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple

3. Just run it directly

CVE-2026-39363 Single Exploit Script

What must be entered here is the domain name, e.g., www.baidu.com, no port needed.

CVE-2026-39363 Batch Exploit Script

Need to search using fofa, place the websites to be scanned in the same directory as CVE-2026-39363批量利用脚本.py.

Then put it in

Then run the script.