zonetoolsciber/explotando-freefloatftp-cve-2025-5548Análisis técnico, preparación de entorno de laboratorio y desarrollo de exploit (RCE) para la vulnerabilidad CVE-2025-5548 en FreeFloat FTP Server.
Welcome to my exploit research and development repository. This project documents the full technical analysis, environment setup, and step-by-step exploitation of CVE-2025-5548 (Stack-Based Buffer Overflow) found in FreeFloat FTP Server.
🌱 Personal note: This project marks my first time exploiting binaries from scratch. I have decided to write down and meticulously document this entire process with a dual purpose: first, to serve as my own knowledge base and notes for the future; and second, to help those who, like me, are just starting out in the world of Exploit Development and reverse engineering. I hope this journey "from crash to exploit" will serve as a guide.
🎓 Academic and Professional Context: This repository has been developed as an applied research project and practical evidence for the Master's Degree in Cybersecurity (Module 6: Vulnerabilities and Exploitation). Its objective is to transparently and structurally demonstrate my analytical, methodological, and technical skills in dealing with real vulnerabilities, forming an active part of my professional portfolio.
This repository is organized into four main sections that document everything from theory and environment configuration to the technical exploitation process:
01. Basic Concepts This section documents the essential theoretical foundations needed to understand the analyzed vulnerability at an internal level. Critical concepts of architecture and memory corruption are addressed, such as Buffer Overflow, stack behavior, and manipulation of the EIP register.
02. Laboratory Environment This section describes in detail the test environment designed to study and carry out the exploitation in a safe and controlled manner. It includes the technical justification for each application used, as well as guides for downloading, installing, and configuring the analysis tools.
03. Exploitation CVE-2025-5548 (FreeFloat FTP Server) Sequential documentation of the technical exploitation process. It presents in an analytical, step-by-step manner the discovery of the flaw in the binary and the evolution of the developed scripts until achieving successful compromise of the vulnerable server.
04. Cheatsheets Repository of auxiliary resources and quick operational reference guides (highlighting the use of the Mona.py extension for automating exploitation tasks). This section is conceived as a scalable knowledge base, intended to incorporate future essential commands and technical tools.
