CVE-2017-15950

This exploit leverages a stack-based buffer overflow in SyncBreeze 10.1.16 via malformed XML input to achieve remote code execution. It uses a combination of stack pivoting and gadgets to redirect execution to a calc.exe payload.

This repository contains a proof-of-concept exploit for CVE-2017-15950, a stack-based buffer overflow vulnerability in SyncBreeze. The exploit includes two Python scripts to generate payloads for either the XML parser or the Sync functionality, both designed to achieve remote code execution via shellcode.