CVE-2025-22457 Simulation: Stack-Based Buffer Overflow Analysis

This project includes the simulation, reverse engineering analysis, and exploitation of a Stack-Based Buffer Overflow vulnerability in a laboratory environment, caused by the lack of input validation (strcpy usage) in embedded systems (Firmware).

🛠️ Requirements

To run this simulation in your local environment, the following tools must be installed:

• Kali Linux (or a similar Debian-based distribution)
• gcc (Compiler)
• gdb (GNU Debugger - for dynamic analysis)
• python3 (For the exploit script)

⚙️ Setup and Compilation

To observe the vulnerability in a laboratory environment without being blocked by modern operating system protections, memory protections (Stack Canary, NX, PIE) must be disabled during compilation.

Open the terminal and compile the source code with the following command:

gcc vulnerable_server.c -o vulnerable_server -fno-stack-protector -z execstack -no-pie