charlyrr/cve-2025-5548Educational lab documenting step-by-step exploitation of CVE-2025-5548 (Stack Buffer Overflow) on Windows 11, from fuzzing and crash analysis to shellcode injection and reverse shell via Immunity Debugger and Mona.
Master in Cybersecurity | Module 6: Vulnerabilities
In this repository I document my practical immersion in binary-level vulnerability analysis and the development of exploits for Windows environments.
The main objective of this lab is to internalize the technical methodology to go from the initial discovery of a memory corruption flaw (Stack Buffer Overflow) to achieving remote code execution (RCE) by exploiting CVE-2025-5548.
It is not just about launching tools, but understanding how memory is corrupted, how to take control of the execution flow (EIP register), and how to bypass restrictions to inject our own Shellcode.
To keep the project organized and simulate the real workflow of an analyst, I have divided the research into two main phases:
The analyst's workshop. Here I document how I set up an isolated virtual machine (Windows 11) and the deployment of the necessary arsenal for the analysis:
The materialization of the risk. Contains the step-by-step methodology for the development of the exploit for CVE-2025-5548:
JMP ESP).Note: This project has been carried out in a strictly controlled and isolated laboratory environment. All experiments, analysis, and exploit development are for exclusively educational purposes as part of my cybersecurity training. I am not responsible for any misuse that may be made of the information or scripts published here.
Author: Carlos Ruesca / Charlyrr
Course: Vulnerability Methodology and Analysis
Note: This project has been carried out in a controlled and ethical laboratory environment, for strictly educational purposes as part of my cybersecurity training.