CVE-2025-22457

This is a functional exploit for CVE-2025-22457, targeting Ivanti Connect Secure for unauthenticated remote code execution via a heap spray and stack pivot technique. It includes a reverse shell payload and brute-forces the libdsplibs.so base address.

This is a scanner for CVE-2025-22457, a stack-based buffer overflow in Ivanti Connect Secure. It checks for vulnerability by sending a crafted X-Forwarded-For header and verifying crash conditions.

This repository provides a mitigation tool for CVE-2025-22457, an X-Forwarded-For header vulnerability in Ivanti/Juniper Secure Connect SSL VPN. It implements a Python-based HTTPS gateway that enforces password authentication before allowing access to the VPN appliance via iptables rules.

This is a functional exploit for CVE-2025-22457, targeting Ivanti Connect Secure for unauthenticated remote code execution via a heap spray and stack pivot technique. It includes a reverse shell payload and brute-forces memory addresses to achieve execution.