CVE-2025-31161 PoC — CrushFTP 安全漏洞

介绍

# Authentication Bypass by Primary Weakness CrushFTP (CVE-2025-31161)

## Overview

Authentication bypass vulnerability in CrushFTP versions 10.0.0 to 10.8.3 and 11.0.0 to 11.3.0. The vulnerability exists in the AWS4-HMAC authorization method of the HTTP component of the FTP server.

## Details

- **CVE ID**: [CVE-2025-31161](https://nvd.nist.gov/vuln/detail/CVE-2025-31161)
- **Discovered**: 2025-03-30
- **Published**: 2024-04-03
- **Impact**: Confidentiality
- **Exploit Availability**: Not public, only private.

## Vulnerability Description

An unauthenticated attacker can : - Bypass authentication completely - Gain access to the crushadmin account - Fully compromise the CrushFTP server - Obtain administrative privileges - Potentially access, modify, or delete sensitive data - Take complete control of the affected system


## Affected Versions

**CrushFTP** 

10.0.0 to 10.8.3 and 11.0.0 to 11.3.0.


## Running

To run exploit you need Python 3.9.
Execute:
```bash
python exploit.py -h 10.10.10.10 -c 'uname -a'
```


## Exploit:
### [https://bit.ly/4id6jeT]

文件快照

备注