CVE-2023-40044 PoC — WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

Source

https://github.com/kenbuckler/WS_FTP-CVE-2023-40044

Associated Vulnerability

Title: WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability (CVE-2023-40044)
Description:In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

Description

Analysis of WS_FTP CVE

Readme

# WS_FTP-CVE-2023-40044
Repository with everything I have tracking the impact of WS_FTP CVE-2023-40044

Includes possibly affected organizations and domains utilizing header methods.

I've also built a news ticker which tracks new stories about MOVEit and WS_FTP, available at https://firehose.kenbuckler.com/moveit

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →