CVE-2015-3306 PoC — ProFTPD mod_copy模块信息泄露漏洞

Source

https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

Associated Vulnerability

Title: ProFTPD mod_copy模块信息泄露漏洞 (CVE-2015-3306)
Description:The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Description

Script that exploits the vulnerability of the ProFTP 1.3.5 service with CVE-2015-3306

Readme

# ProFTPd-1.3.5-mod_copy-Remote-Command-Execution
Script that exploits the vulnerability of the ProFTP 1.3.5 service with CVE-2015-3306
## Usage
.ProFTPD_1.3.5_RemoteCommandExecution.py [-h] --rhost RHOST --rport_ftp RPORT_FTP --target_uri TARGET_URI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →