mrr0b0t19/cve-2023-41064Python script generating a crafted WebP file to trigger CVE-2023-41064 for educational testing and vulnerability analysis.
Code lengths to trigger this vulnerability CVE-2023-41064
This is a Python script that creates an empty WebP file (an image format) with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educational purposes.
Make sure you have the following prerequisites on your system:
Python 3.x installed.
WebP installed on your system. (This requirement is necessary for the script to run correctly).
Clone or download this repository to your system.
Open a terminal and navigate to the location of the crafteando.py file.
Run the script by providing an output WebP file name:
python crafteando.py bad.webp
This will generate an empty WebP file named bad.webp in the current directory.
bw.close(): This line closes the output file bw. After this line, the file is no longer in use and writing is complete.
subprocess.run(["hola_mundo.exe"]): This line executes an external program called "hola_mundo.exe" using Python's subprocess module. The program "hola_mundo.exe" will run on the system as an independent process. The execution of this program is a separate action and is not directly related to the creation of the WebP file.
The generated WebP file will be empty, meaning it will not contain image data.
Make sure you have the WebP software installed on your system, as it is necessary to run the script.
This script is intended for educational and testing purposes only. It should not be used maliciously or for illegal activities. Misuse of this script may have legal consequences. The author assumes no responsibility for its misuse.