adk86/cve-vulnerability-research-exploit-analysisResearched and executed real-world CVE exploits in a controlled sandbox: CVE-2000-0168 DoS on Windows 95, ARP Spoofing with NTLMv2 credential interception on Windows XP, and Shellshock RCE via Burp Suite. All activities performed legally for educational purposes.
A structured penetration testing project researching and executing real-world CVE exploits in a controlled sandbox environment. Targets included Windows 95 and Windows XP SP3 running across a multi-machine virtual network built with VirtualBox. Exploits executed:
CVE-2000-0168 — DoS attack against Windows 95 via malicious device path names delivered through a weaponized Apache web server, causing immediate BSoD or system freeze ARP Spoofing & MITM Credential Interception — Bidirectional ARP cache poisoning on Windows XP SP3 using Kali Linux and arpspoof, with NTLMv2 hash capture via Responder and full traffic interception via Wireshark CVE-2014-6271 (Shellshock) — Remote code execution via malicious HTTP header injection into a Bash CGI script using Burp Suite, establishing a reverse shell on the target machine
All activities were performed legally on isolated virtual machines for educational purposes as part of CS4371 at Texas State University. Includes full documentation of methodology, exploit selection criteria, execution steps, evidence screenshots, and post-execution cleanup procedures.
