Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-5548 — End-to-end exploitation lab for CVE-2025-5548 (FreeFloat FTP Server stack buffer overflow). Includes static analysis with IDA/Ghidra, binary fuzzing, payload engineering, and reverse shell pivot on Windows 11. | Kitploit
Tools/GitHubGitHub/fkshield/cve-2025-5548
Static AnalysisDynamic Analysis (Sandboxing)Vulnerability AnalysisExploitationReverse EngineeringShellcodeFuzzingPenetration TestingLearning & EducationPayload DevelopmentBinary ExploitationLabs & Practice
52 months agoNot yet reviewed
GitHubfkshield/cve-2025-5548

CVE-2025-5548

End-to-end exploitation lab for CVE-2025-5548 (FreeFloat FTP Server stack buffer overflow). Includes static analysis with IDA/Ghidra, binary fuzzing, payload engineering, and reverse shell pivot on Windows 11.

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Memory Corruption Research & Exploitation Lab (CVE-2025-5548)

Advanced Vulnerability Analysis on Windows 11 Environment

Author OS Focus

[English Version]

Project Overview

This repository documents a professional-grade cybersecurity research project focused on CVE-2025-5548: a Stack-based Buffer Overflow vulnerability in FreeFloat FTP Server 1.0.

The goal is to demonstrate a rigorous analytical methodology, transitioning from a hardened Windows 11 (build 26200.6584) research environment to a functional, end-to-end Proof of Concept (PoC).

Lab Roadmap

The research is divided into two distinctive high-level modules:

01. Research Infrastructure

Detailed deployment of the laboratory stack.

  • System Hardening: Windows SDK, Networking (Twin-Adapter), and Security exclusions.
  • Weaponry & Tooling: Implementation of Python 3/2.7, Java JDK, IDA Disassemblers, and Ghidra.
  • Dynamic Analysis: Deployment of Immunity Debugger and the specialized Mona.py plugin.

02. The Exploitation Lifecycle

The technical path to memory corruption.

  • Static Recon: Mapping unsafe C functions (strcpy) in the binary.
  • Binary Fuzzing: Automated crash discovery and EIP hijacking.
  • Payload Engineering: Bad-char analysis, ROP/JMP ESP gadgets, and MSFvenom shellcode.
  • Pivoting: Accessing the remote system through a reverse shell.

Author

  • Ismael A. Pérez Segura - LinkedIn

Legal Disclaimer

This project is for educational and ethical security testing purposes only. Unauthorized access to computer systems is illegal. The author is not responsible for any misuse of the information or code provided in this repository.

[Versión en Español]

Resumen del Proyecto

Este repositorio documenta un proyecto de investigación de ciberseguridad centrado en la CVE-2025-5548: una vulnerabilidad de Desbordamiento de Buffer (Stack-based) en el servidor FreeFloat FTP 1.0.

El objetivo es demostrar una metodología analítica rigurosa, desde la construcción de un entorno de investigación en Windows 11 hasta la ejecución de una Prueba de Concepto (PoC) funcional completa.

Roadmap del Laboratorio

La investigación se divide en dos módulos principales de alto nivel:

01. Infraestructura de Investigación

Despliegue detallado del stack tecnológico del laboratorio.

  • Endurecimiento del Sistema: SDK de Windows, Red (Adaptador Dual) y exclusiones de seguridad.
  • Herramientas Core: Implementación de Python 3/2.7, Java JDK, IDA y Ghidra.
  • Análisis Dinámico: Despliegue de Immunity Debugger y el plugin especializado Mona.py.

02. Ciclo de Vida de la Explotación

El camino técnico hacia la corrupción de memoria.

  • Reconocimiento Estático: Mapeo de funciones inseguras (strcpy) en el binario.
  • Fuzzing Binario: Descubrimiento automatizado del crash y secuestro del EIP.
  • Ingeniería del Payload: Análisis de bad-chars, gadgets JMP ESP y shellcode de MSFvenom.
  • Pivotaje: Acceso al sistema remoto mediante una shell reversa.

Autor

  • Ismael A. Pérez Segura - LinkedIn

Aviso Legal

Este proyecto tiene fines educativos y de pruebas de seguridad éticas únicamente. El acceso no autorizado a sistemas informáticos es ilegal. El autor no se hace responsable del mal uso de la información o código proporcionado en este repositorio.

Download Tool