CVE-2021-35211

This PoC exploits a heap-based buffer overflow in SolarWinds Serv-U SSH server (CVE-2021-35211) by spraying crafted SSH packets to corrupt memory and trigger arbitrary code execution. The exploit leverages ROP techniques and targets the SSH key exchange process.

This repository contains a detailed technical walkthrough of developing a ROP-based exploit for CVE-2021-35211, a vulnerability in Serv-U FTP v15.2.3.717. It includes an analysis of the vulnerability, exploit development steps, and a Python-based PoC.

This repository contains a functional exploit for CVE-2021-35211, a memory corruption vulnerability in Serv-U FTP for Windows, allowing remote code execution. The exploit includes ROP chains and multiple execution modes (command execution, shellcode stager, download/exec).

This repository contains a functional exploit for CVE-2021-35211, a memory corruption vulnerability in Serv-U FTP for Windows, allowing remote code execution. The exploit includes ROP chains and multiple execution modes (command execution, shellcode stager, download/exec).