
Entorno y explotación de la vulnerabilidad CVE-2025-5548
This lab demonstrates how to exploit a Stack Buffer Overflow vulnerability in FreeFloat FTP Server, identified as CVE-2025-5548.
The objective is to understand the complete exploitation process on vulnerable Windows applications, including:
This lab is designed for educational purposes to learn classic memory exploitation techniques.
During this lab you will learn to:
The lab is carried out in a controlled environment with the following tools:
FreeFloat-BOF-Lab/
│
├── exploit/
│ ├── fuzz.py
│ ├── offset.py
│ ├── badchars.py
│ └── exploit.py
│
├── methodology/
│ └── exploitation_methodology.md
│
├── screenshots/
│
└── README.md
The exploitation follows these steps:
You can find the full explanation here:
methodology/exploitation_methodology.md
Listen for the reverse connection:
nc -lvnp 443
Run the exploit:
python exploit.py