Research

Research output from newt lab — papers, technical reports, tool releases, and security advisories.

• CVE-2020-9273: a use-after-free in ProFTPd

  dukpt · 2026-08-11

  Phrack 72 · 2025-08-19

  A heap use-after-free in ProFTPd through 1.3.7rc2, turned into remote code execution by joining the FTP control and data channels — with the full write-up in Phrack 72.

• dhcp-scapy-server

  dukpt · 2026-05-19

  A minimal DHCP server in one Python script, built on Scapy. Small enough to read top to bottom, for lab segments and isolated networks where ISC DHCP or dnsmasq would be overkill.

• tcpkiller

  dukpt · 2026-05-19

  A small Python tool that sniffs a network segment and tears down the TCP connections of chosen targets, and a plain demonstration of how exposed cleartext TCP is on a shared link.

• uglyform

  dukpt · 2026-05-19

  A 2010 buffer-overflow proof of concept in C. It pops a GUI form instead of calc.exe to show, plainly, that the attacker's code is now running.