---
id: 4033
title: "Creating an Exploit: SolarWinds Vulnerability CVE-2021-35211"
cve: CVE-2021-35211
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/exploit-for-cve-2021-35211"
published_at: "2022-01-13T00:00:00Z"
tags: ["vulnerability", "solarwinds", "rop", "exploit-development", "serv-u", "cve-2021-35211"]
phying_url: "https://phying.com/item/4033"
lang: en
---

# Creating an Exploit: SolarWinds Vulnerability CVE-2021-35211

## Summary

A walkthrough of building a ROP exploit for CVE-2021-35211 in SolarWinds Serv-U FTP, from NattiSamson's PoC to controlling r9 and hijacking rip with Hopper, radare2, and WinDBG.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2021-35211
- **Published:** 2022-01-13T00:00:00Z
- **Original:** https://bishopfox.com/blog/exploit-for-cve-2021-35211
- **Phying News:** https://phying.com/item/4033