Educational lab documenting step-by-step exploitation of CVE-2025-5548 (Stack Buffer Overflow) on Windows 11, from fuzzing and crash analysis to shellcode injection and reverse shell via Immunity Debugger and Mona.
Master in Cybersecurity | Module 6: Vulnerabilities
In this repository I document my practical immersion in binary-level vulnerability analysis and the development of exploits for Windows environments.
The main objective of this lab is to internalize the technical methodology to go from the initial discovery of a memory corruption flaw (Stack Buffer Overflow) to achieving remote code execution (RCE) by exploiting CVE-2025-5548.
It is not just about launching tools, but understanding how memory is corrupted, how to take control of the execution flow (EIP register), and how to bypass restrictions to inject our own .
To keep the project organized and simulate the real workflow of an analyst, I have divided the research into two main phases:
The analyst's workshop. Here I document how I set up an isolated virtual machine (Windows 11) and the deployment of the necessary arsenal for the analysis:
The materialization of the risk. Contains the step-by-step methodology for the development of the exploit for CVE-2025-5548:
JMP ESP).Note: This project has been carried out in a strictly controlled and isolated laboratory environment. All experiments, analysis, and exploit development are for exclusively educational purposes as part of my cybersecurity training. I am not responsible for any misuse that may be made of the information or scripts published here.
Author: Carlos Ruesca / Charlyrr
Course: Vulnerability Methodology and Analysis
Note: This project has been carried out in a controlled and ethical laboratory environment, for strictly educational purposes as part of my cybersecurity training.