greycat-amc/cve-2025-5548Analisis de CVE relacionada con stack overflow
This repository documents the full process of exploiting a Buffer Overflow vulnerability, following a structured methodology from initial analysis to execution flow control.
The goal of this phase is to develop a functional exploit that allows redirecting the execution flow of the vulnerable program and laying the groundwork for arbitrary code execution.
The steps followed during the process are detailed below:
Binary analysis using reverse engineering tools to understand:
📁Step1-Static binary analysis with IDAFree
Sending malformed inputs to the program to trigger a controlled crash and confirm the existence of the vulnerability.
Determination of the exact position where the EIP register is overwritten.
📁 Step3-Discovery of the EIP Register Offset
Verification that it is possible to control the execution flow by overwriting the EIP with arbitrary values.
Detection of characters that alter the behavior of the payload and must be excluded from the shellcode.
📁 Step5-Finding Bad Characters
Locating memory addresses that allow redirecting execution towards the payload.
This project has been carried out in a controlled laboratory environment for educational purposes.
No real systems have been attacked.
The described process allows progressing in a structured manner in the development of an exploit, validating at each stage the progressive control over the vulnerable program until achieving arbitrary code execution.
