CVE-2025-5548 - Exploit Development Lab

This repository documents the process of setting up a working environment for vulnerability analysis and exploit development, and applying it to a practical buffer overflow case study.

The project is built around FreeFloat FTP Server 1.0, used as an educational target to understand how a vulnerability can be identified, analyzed, and exploited in a controlled environment.

Rather than focusing only on reproducing an exploit, the goal is to document the full workflow: preparing the environment, triggering the vulnerability, analyzing the crash, controlling execution flow, and achieving code execution.

---

Approach

The work is divided into two main parts:

• Environment - preparation of the tools and applications required for the analysis
• Exploitation - analysis and development of the exploit

The environment was first built manually in order to understand how each tool fits into the workflow. This makes it easier to understand the purpose of every component and provides a stronger foundation before using automated setups.

---

Objectives

The main objectives of this lab are:

• Understand how a buffer overflow works in practice
• Learn how to analyze crashes and inspect execution flow
• Identify the exact offset required to overwrite EIP
• Build a working exploit in a controlled environment
• Document the full process in a clear and professional way

---

Repository structure

├── environment

├── exploitation

Each section includes explanations, relevant commands, and selected screenshots that help illustrate the process without adding unnecessary noise.

Notes

This repository is not intended to be a blind step-by-step copy of a tutorial. It is structured as a practical analysis of the workflow followed during the lab, with the goal of understanding the tools, the methodology, and the reasoning behind each phase of the exploitation process.