Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-5548 — Entorno y explotación de la vulnerabilidad CVE-2025-5548 | Kitploit
Tools/GitHubGitHub/javyan05/cve-2025-5548
ExploitationShellcodeDebuggersFuzzingPenetration TestingLearning & EducationPayload DevelopmentBinary ExploitationLabs & Practice
GitHubjavyan05/cve-2025-5548

CVE-2025-5548

Entorno y explotación de la vulnerabilidad CVE-2025-5548

25 months agoNot yet reviewed
View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

🧪 FreeFloat FTP Server Buffer Overflow Lab (CVE-2025-5548)

Security Platform Language Difficulty


📌 Description

This lab demonstrates how to exploit a Stack Buffer Overflow vulnerability in FreeFloat FTP Server, identified as CVE-2025-5548.

The objective is to understand the complete exploitation process on vulnerable Windows applications, including:

  • Fuzzing the service
  • Identifying the EIP offset
  • Controlling the execution flow
  • Identifying bad characters
  • Locating JMP ESP instructions
  • Generating shellcode
  • Developing a functional exploit

This lab is designed for educational purposes to learn classic memory exploitation techniques.


🎯 Lab Objectives

During this lab you will learn to:

  • Analyze a vulnerable service
  • Trigger a controlled crash
Download Tool
  • Find the exact EIP offset
  • Control the execution flow
  • Identify bad characters
  • Find gadgets in memory
  • Generate shellcode with msfvenom
  • Build an exploit in Python

  • 🖥️ Lab Environment

    The lab is carried out in a controlled environment with the following tools:

    Victim Machine

    • Windows 7 / Windows XP
    • FreeFloat FTP Server
    • Immunity Debugger
    • Mona.py

    Attacker Machine

    • Kali Linux
    • Python 3
    • Metasploit Framework
    • Netcat

    🧰 Tools Used

    • Immunity Debugger
    • Mona.py
    • Metasploit Framework
    • msfvenom
    • Python sockets
    • Netcat

    📂 Lab Structure

    root@kitploit:~
    FreeFloat-BOF-Lab/
    │
    ├── exploit/
    │   ├── fuzz.py
    │   ├── offset.py
    │   ├── badchars.py
    │   └── exploit.py
    │
    ├── methodology/
    │   └── exploitation_methodology.md
    │
    ├── screenshots/
    │
    └── README.md
    

    🔬 Methodology

    The exploitation follows these steps:

    1. Fuzzing
    2. Finding EIP offset
    3. Controlling EIP
    4. Identifying bad characters
    5. Finding JMP ESP
    6. Generating shellcode
    7. Executing the exploit

    You can find the full explanation here:

    root@kitploit:~
    methodology/exploitation_methodology.md
    

    🚀 Running the Exploit

    Listen for the reverse connection:

    root@kitploit:~
    nc -lvnp 443
    

    Run the exploit:

    root@kitploit:~
    python exploit.py
    

    📚 Concepts Learned

    • Stack Buffer Overflow
    • EIP register control
    • Shellcode
    • Bad Characters
    • JMP ESP
    • Debugging on Windows
    • Exploit development