alvarosr/cve-2025-5548Documented technical analysis and controlled exploitation of CVE-2025-5548 in FreeFloat FTP Server, covering lab setup, static/dynamic binary analysis, vulnerability localization, and exploit validation for educational purposes.
This work documents the complete process of technical analysis and controlled exploitation of the vulnerability CVE-2025-5548 affecting FreeFloat FTP Server software, within a laboratory environment designed exclusively for educational, research, and understanding purposes of the internal behavior of the vulnerable binary.
The main objective of this project is to study, in an orderly and understandable manner, the complete cycle of vulnerability analysis, from environment preparation to the practical validation of its exploitation.
More specifically, this work aims to:
The purpose is not only to demonstrate that a vulnerability exists, but to understand why it occurs, how it can be located, and how it can be leveraged within a controlled laboratory.
This repository has been organized following a logical work sequence, so that each phase supports the next one.
First, the laboratory environment where the vulnerable service will run is defined and prepared. Subsequently, an analysis phase is carried out aimed at understanding the binary and locating the function involved in the flaw. Finally, the exploitation phase is developed, in which the vulnerable behavior is validated and its practical impact is demonstrated.
In this way, the project is not limited to showing a final result, but rather reflects all the technical reasoning followed from the beginning to the exploitation.
The content of the work is divided into two main blocks: the visual support part and the documentary part.
Images folderThis folder contains the images used throughout the entire work to visually support each of the process phases. Its organization is laid out as follows:
Images/
├── analysis/
├── environment/
└── explotation/
Each subfolder groups the screenshots and illustrations corresponding to a specific phase:
environment/: images related to laboratory preparation and initial environment configuration.
analysis/: screenshots of the static and dynamic analysis of the binary, tool usage, and location of the vulnerable function.
explotation/: images associated with the exploitation phase, tests performed, and validation of the flaw.
Laboratory folderThis folder brings together the main project documentation in Markdown format. It describes, step by step, the technical development of the work:
Laboratory/
├── environment.md
├── analysis.md
└── explotation.md
The content of each document is as follows:
environment.md: describes the creation of the laboratory environment.
analysis.md: develops the analysis phase.
explotation.md: documents the exploitation process.
In addition to the technical component, this repository has a clearly documentary purpose. Therefore, an effort has been made to maintain a clean organization, progressive writing, and a clear separation between images and technical explanation.
The idea is that anyone who consults the work can follow the complete process in an orderly manner, understanding not only what was done, but also why it was done in that order and with what objective.
All tests, analyses, and procedures described in this repository have been designed within a controlled laboratory environment and for exclusively educational purposes. The content is presented with the aim of technically studying the vulnerability, understanding its operation, and documenting the analysis and exploitation process in a responsible manner.