Wing FTP Server RCE via Lua Injection# CVE-2025-47812 – Wing FTP Server RCE via Lua Injection
**Author:** [0xgh057r3c0n](https://github.com/0xgh057r3c0n)
---
## 🧠 Description
This exploit leverages a Lua injection vulnerability in **Wing FTP Server**'s login handler (`loginok.html`) to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code execution through the `username` parameter.
---
## 📦 Requirements
- Python 3.6 or higher
- `pip3`
### Python Packages
Install the required packages with:
```bash
pip3 install -r requirements.txt
````
Or manually:
```bash
pip3 install requests colorama
```
---
## 🛠️ Installation
```bash
git clone https://github.com/0xgh057r3c0n/CVE-2025-47812.git
cd CVE-2025-47812
python3 CVE-2025-47812.py
```
---
## 🚀 Usage
Run the script:
```bash
python3 CVE-2025-47812.py
```
### Options:
* **Option 1:** Execute a system command (e.g., `whoami`, `id`)
* **Option 2:** Launch a reverse shell (multiple payload options included)
---
## 💡 Example
```text
Target URL (e.g., http://localhost:5466): http://192.168.1.100:5466
Username (e.g., anonymous): anonymous
Your choice (1 or 2): 1
Command to execute (default: whoami): whoami
```
---
## ⚠️ Legal Disclaimer
This tool is provided for **educational and authorized security testing purposes only**.
You are responsible for your actions. Use only on systems you own or are authorized to test.
---
## 📄 License
This project is licensed under the MIT License. See the [LICENSE](LICENSE) file for details.
[4.0K] /data/pocs/7a8f343972ca8ac6fe9e0a8a75e1a014797fbc88
├── [5.4K] CVE-2025-47812.py
├── [1.1K] LICENSE
└── [1.5K] README.md
1 directory, 3 files