CVE-2015-3306 PoC — ProFTPD mod_copy模块信息泄露漏洞

Source

https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

Associated Vulnerability

Title:ProFTPD mod_copy模块信息泄露漏洞 (CVE-2015-3306)
Description:ProFTPD是ProFTPD团队的一套开源的FTP服务器软件。该软件具有可配置性强、安全、稳定等特点。 ProFTPD 1.3.5版本的mod_copy模块中存在安全漏洞。远程攻击者可借助site cpfr和site cpto命令利用该漏洞读取和写入任意文件。

Description

Script that exploits the vulnerability of the ProFTP 1.3.5 service with CVE-2015-3306

Readme

# ProFTPd-1.3.5-mod_copy-Remote-Command-Execution
Script that exploits the vulnerability of the ProFTP 1.3.5 service with CVE-2015-3306
## Usage
.ProFTPD_1.3.5_RemoteCommandExecution.py [-h] --rhost RHOST --rport_ftp RPORT_FTP --target_uri TARGET_URI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD

File Snapshot


 [4.0K]  /data/pocs/27a9ca6df91af1e068c9ff1c67f6bec3291c61f8
├── [ 34K]  LICENSE
├── [3.1K]  ProFTPD_1.3.5_RemoteCommandExecution.py
└── [ 307]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!