CVE-2025-22457

This is a functional exploit for CVE-2025-22457, targeting Ivanti Connect Secure for unauthenticated remote code execution via a heap spray and stack pivot technique. It includes a reverse shell payload and brute-forces the libdsplibs.so base address.

This is a scanner for CVE-2025-22457, a stack-based buffer overflow in Ivanti Connect Secure. It checks for vulnerability by sending a crafted X-Forwarded-For header and verifying crash conditions.

This repository provides a mitigation tool for CVE-2025-22457, an X-Forwarded-For header vulnerability in Ivanti/Juniper Secure Connect SSL VPN. It implements a Python-based HTTPS gateway that enforces password authentication before allowing access to the VPN appliance via iptables rules.

This is a functional exploit for CVE-2025-22457, targeting Ivanti Connect Secure for unauthenticated remote code execution via a heap spray and stack pivot technique. It includes a reverse shell payload and brute-forces memory addresses to achieve execution.

This repository demonstrates a stack-based buffer overflow vulnerability (CVE-2025-22457) in a simulated firmware TCP service. The PoC includes vulnerable and patched server code, a crash client, and a basic exploit script that overwrites the return address (EIP) to demonstrate control.

This repository demonstrates a stack-based buffer overflow vulnerability (CVE-2025-22457) in a simulated firmware network service due to unsafe `strcpy` usage. The PoC includes a Python exploit that overwrites the return address (EIP) and a vulnerable/patched server implementation for comparative analysis.

This Metasploit module exploits a stack-based buffer overflow in Ivanti Connect Secure (CVE-2025-22457) to achieve unauthenticated remote code execution. It uses heap spraying and ROP chain techniques to bypass ASLR and execute arbitrary commands.