CVE-2025-34096

This exploit targets a buffer overflow vulnerability in Easy File Sharing Web Server 7.2, utilizing a ROP chain to bypass DEP and execute a calc.exe payload via shellcode. The exploit is designed for Windows XP SP2 and Windows 2008 R2 x64.

This repository contains a functional exploit for CVE-2025-34096, a stack-based buffer overflow (SEH) in Easy File Sharing Web Server 7.2. The exploit includes multiple Python scripts demonstrating the full exploitation chain, from crash reproduction to shellcode execution.

This Metasploit module exploits a POST buffer overflow in Easy File Sharing HTTP Server 7.2 via a crafted HTTP request to '/sendemail.ghp'. It uses a ROP chain to bypass DEP and achieve remote code execution.