Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-5548 — Buffer overflow in FreeFloat FTP Server 1.0 | Kitploit
Tools/GitHubGitHub/elrajiii/cve-2025-5548
Vulnerability AnalysisExploitationReverse EngineeringShellcodeDebuggersFuzzingPenetration TestingLearning & EducationPayload DevelopmentBinary ExploitationLabs & Practice
25 months agoNot yet reviewed
GitHub
elrajiii/cve-2025-5548

CVE-2025-5548

Buffer overflow in FreeFloat FTP Server 1.0

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🐞CVE-2025-5548

Buffer overflow in FreeFloat FTP Server 1.0

sof

🎯 Stack Buffer Overflow Exploitation

This repository contains the documentation and practical development of a cybersecurity project focused on reverse engineering and the exploitation of memory-level vulnerabilities (Stack Buffer Overflow) in 32-bit Windows environments.

📌 Project Objective

The objective of this project is to audit, analyze, and successfully exploit the Freefloat FTP Server v1.00 software, which is known to lack modern security mitigations (such as ASLR or DEP). Throughout this repository, the entire lifecycle of the attack is documented: from setting up the laboratory environment with professional tools, to vulnerability discovery (Fuzzing), and hijacking the program's execution flow to obtain a remote console (Reverse Shell).


📂 Repository Structure

The project is divided into two main phases, each with its own detailed documentation and corresponding scripts:

  • 🛠️ 01 Lab_Setup

    • Contains the justification, download, and installation instructions for all the tools used during the project (Debuggers, IDEs, Interpreters, and Vulnerable Software).
    • Featured tools: Immunity Debugger, IDA, Mona.py, Python 3.
  • 💥 02 Vulnerability

Download Tool
  • Contains the vulnerability analysis and the progressive development of the exploit.
  • Includes Python scripts for: Fuzzing, controlling the EIP register, calculating offsets, identifying Bad Chars, and injecting the final Shellcode.

⚙️ Applied Methodology

To achieve successful exploitation, the following methodological phases were followed:

  1. Environment Setup: Secure deployment of the victim machine and analysis tools.
  2. Fuzzing (Discovery): Sending anomalous inputs to the FTP server to cause a crash (Denial of Service).
  3. EIP Control: Creating cyclic patterns to calculate the exact buffer size and overwrite the instruction pointer.
  4. Memory Analysis: Identifying restricted characters (Bad Chars) and searching for jump instructions (JMP ESP).
  5. Exploitation: Generating the malicious payload (Shellcode) and achieving Remote Code Execution (RCE).