Skip to content

Analysis and exploitation of an use-after-free in ProFTPd

Notifications You must be signed in to change notification settings

ptef/CVE-2020-9273

Repository files navigation

CVE-2020-9273

These are the files I created during analysis and exploitaion of CVE-2020-9273 - a heap use-after-free in ProFTPd.

Take a look at the exploit video here.

Description about the files in this repo:

poc-not-really-v4.c - an article and poc I wrote last year (oct/2020), read to understand the exploitation path;

exploit_demo.c - demo exploit released, with hardcoded addresses, dated from last year too;

exploit_proftpd.c - reliable exploit, for localhost testing, finished on 16/08/2021.

Please feel free to DM me if you have questions or comments.

About

Analysis and exploitation of an use-after-free in ProFTPd

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages