## https://sploitus.com/exploit?id=8E43A875-78E4-50EB-9EF6-F0C93D0E865D
## CVE-2025-47917 Exploit (Use-After-Free in mbedTLS)
# Author : Byte Reaper
# Telegram : [@ByteReaper0](https://t.me/ByteReaper0)
# CVE : CVE-2025-47917
# Vulnerability : Use-After-Free (UAF) in mbedTLS 3.6.4 name parsing
---
## Description
This repository contains an exploit targeting a Use-After-Free vulnerability in the mbedtls_x509_string_to_names() name parsing function of the mbedTLS library. A successful exploit grants arbitrary code execution with root privileges by hijacking freed heap metadata and redirecting control flow to injected shellcode.
---
## Prerequisites
1. **Operating System**: Linux (tested on Kali Linux)
2. **Root privileges**: Required for disabling ASLR and executing injected shellcode
3. **mbedTLS development libraries (mbedTLS val.p` pointer.
---
## Reverse Shell Shellcode
* **Target IP**: `192.168.92.187`
* **Target Port**: `4454`
The shellcode performs a `socket` + `connect` + `dup2` sequence, then `execve("/bin/sh")`.
---
## Ethical and Legal Disclaimer
* This code is provided **for authorized security research and educational purposes only**.
* Unauthorized use against systems for which you do not have explicit permission is illegal and unethical.
* Always obtain written permission before testing on any network or host.
---
## License
MIT