⚡ CVE-2025-5548: Vulnerability Research & Exploitation

This repository provides a technical analysis and proof-of-concept walkthrough for CVE-2025-5548. This research covers the complete lifecycle of the vulnerability, from initial binary inspection to successful exploitation.

⚠️ Legal & Ethical Disclaimer

This repository is for educational purposes only. All research was performed in a controlled, isolated laboratory environment. Unauthorized use of these techniques against systems without explicit permission is illegal and unethical.

---

🔍 Vulnerability Overview

CVE-2025-5548 is a critical Stack-based Buffer Overflow vulnerability identified in the FreeFloat FTP Server (specifically affecting the handling of the USER and PASS commands). The flaw occurs because the application fails to properly validate the length of user-supplied input strings before copying them into a fixed-size stack buffer.

By sending an oversized string to the listening service (Default Port 21), an attacker can overwrite the Extended Instruction Pointer (EIP), allowing for arbitrary code execution or a complete Denial of Service (DoS).

Scope & Impact

• Target Software: FreeFloat FTP Server.
• Vulnerability Type: Memory Corruption (Stack-based Buffer Overflow).
• Impact: Remote Code Execution (RCE).
• Attack Vector: Network-based (Remote).
• Research Context: In this laboratory, we use Vulnserver as a preliminary training ground to master the overflow techniques that will then be applied to exploit this specific CVE in the FreeFloat environment.

---

📂 Laboratory Documentation

The project is divided into the following phases:

• Environment: Setup guide for the analysis workstation and required binary exploitation toolchain.
• Exploitation: Detailed walkthrough of the binary analysis, fuzzing, and proof-of-concept (PoC) development.