Sploitus

Exploit for Use After Free in Arm Mbed Tls

githubexploit Β· 2025-07-22

Exploit Code

README43 lines
## https://sploitus.com/exploit?id=8E43A875-78E4-50EB-9EF6-F0C93D0E865D
## CVE-2025-47917 Exploit (Use-After-Free in mbedTLS)
# Author       : Byte Reaper
# Telegram     : [@ByteReaper0](https://t.me/ByteReaper0)
# CVE          : CVE-2025-47917
# Vulnerability :  Use-After-Free (UAF) in mbedTLS 3.6.4 name parsing

---

## Description

This repository contains an exploit targeting a Use-After-Free vulnerability in the mbedtls_x509_string_to_names() name parsing function of the mbedTLS library. A successful exploit grants arbitrary code execution with root privileges by hijacking freed heap metadata and redirecting control flow to injected shellcode.

---

## Prerequisites

1. **Operating System**: Linux (tested on Kali Linux)
2. **Root privileges**: Required for disabling ASLR and executing injected shellcode
3. **mbedTLS development libraries (mbedTLS val.p` pointer.

---

## Reverse Shell Shellcode

* **Target IP**: `192.168.92.187`
* **Target Port**: `4454`

The shellcode performs a `socket` + `connect` + `dup2` sequence, then `execve("/bin/sh")`.

---

## Ethical and Legal Disclaimer

* This code is provided **for authorized security research and educational purposes only**.
* Unauthorized use against systems for which you do not have explicit permission is illegal and unethical.
* Always obtain written permission before testing on any network or host.

---

## License

MIT