Adobe Flash Player ByteArray valueOf Use-After-Free RCE

This repository contains a proof-of-concept (POC) exploit for CVE-2015-5119, a critical vulnerability in Adobe Flash Player. The repository consists of four ActionScript (.as) files and a README. The main file, '0_poc.as', demonstrates the core exploit technique: it manipulates a ByteArray object and uses a custom valueOf method on an object to trigger a memory corruption condition. The other ActionScript files ('1_simplebyte.as', '2_simpleobject.as', '3_object_withvalueOf.as') provide simplified or incremental examples of ByteArray and object manipulation, likely to illustrate the steps leading up to the full exploit. There are no hardcoded network endpoints or file paths; the exploit is designed to be run in a Flash environment, typically within a browser. The code serves as a POC for researchers or analysts studying the vulnerability, rather than a weaponized exploit.

This repository contains a full exploit for CVE-2015-5119, a critical use-after-free vulnerability in Adobe Flash Player. The exploit is implemented in ActionScript 3 and is designed to be compiled into a malicious SWF file (CVE-2015-5119.swf), which is then loaded via an HTML page (bin/index.html) using JavaScript (swfobject.js). The exploit leverages heap spraying and memory corruption techniques to achieve arbitrary code execution. The code is modular, with separate classes for memory manipulation (ExploitByteArray, ExploitVector), ELF/PE parsing (Elf.as, PE.as, PE64.as), and the main exploit logic (Exploit.as, MyClass.as, Exploiter.as, Exploiter64.as). The exploit is capable of targeting both Windows and Linux platforms, depending on the payload and platform parameters. The payload is provided as a base64-encoded string, decoded at runtime, and executed as shellcode. The repository is operational and provides a working exploit chain, but the payload must be supplied by the attacker. No hardcoded C2 or network endpoints are present; exploitation is achieved via browser delivery of the SWF file.