---
# HFS CVE-2014-6287 Exploit Tool
## Overview
This repository contains a Python-based exploit tool designed to take advantage of the **CVE-2014-6287** vulnerability in **HTTP File Server (HFS)** versions **2.3.x**. This vulnerability allows an attacker to execute arbitrary commands on the server, potentially leading to unauthorized access and control.
**⚠️ Disclaimer:**
This tool is intended **solely for educational and authorized penetration testing purposes**. Unauthorized use of this tool against systems you do not own or have explicit permission to test is illegal and unethical. The author and contributors are **not responsible** for any misuse or damage caused by this tool.
## Table of Contents
- [Features](#features)
- [Prerequisites](#prerequisites)
- [Installation](#installation)
- [Usage](#usage)
- [How It Works](#how-it-works)
- [Configuration](#configuration)
- [Troubleshooting](#troubleshooting)
- [Contributing](#contributing)
- [Author](#author)
- [License](#license)
## Features
- **Command Execution:** Executes arbitrary PowerShell commands on the target HFS server.
- **Reverse Shell:** Establishes a reverse shell connection back to the attacker's machine.
- **Base64 Encoding:** Utilizes Base64 encoding to obfuscate the PowerShell command.
- **Customizable IPs and Ports:** Easily configure local and remote host addresses and ports.
## Prerequisites
- **Python 3.6+**
- **Netcat (`nc`)** installed on the attacker's machine.
- **HTTP File Server (HFS)** version **2.3.x** running on the target machine.
- **Network Access:** Ensure that the attacker's machine can communicate with the target machine over the specified ports.
## Installation
1. **Clone the Repository:**
```bash
git clone https://github.com/francescobrina/hfs-cve-2014-6287-exploit.git
cd hfs-cve-2014-6287-exploit
```
2. **Install Dependencies:**
This script relies on Python's standard libraries. Ensure you have Python 3.6 or higher installed.
```bash
python3 --version
```
If you don't have Python installed, download it from the [official website](https://www.python.org/downloads/) or use your package manager.
## Usage
1. **Configure the Script:**
Open the `exploit.py` file in a text editor and configure the following variables:
```python
lhost = "YOUR_LOCAL_IP" # Your attacker's IP address
lport = 1111 # Port to listen on
rhost = "TARGET_IP" # Target HFS server IP address
rport = 80 # Target HFS server port (default is 80)
```
2. **Start Netcat Listener:**
On your attacker's machine, start a Netcat listener to receive the reverse shell:
```bash
nc -nlvp 1111
```
3. **Run the Exploit Script:**
Execute the Python exploit script:
```bash
python3 exploit.py
```
The script will encode the PowerShell command in Base64, send an HTTP GET request to the target HFS server, and await a reverse shell connection.
4. **Establish Connection:**
If the exploit is successful, you should receive a reverse shell on your Netcat listener.
## How It Works
1. **PowerShell Command Creation:**
The script constructs a PowerShell command that initiates a TCP connection back to the attacker's machine (`lhost:lport`). Once connected, it creates a stream to send and receive data, effectively establishing a reverse shell.
2. **Encoding the Command:**
The PowerShell command is encoded in Base64 using UTF-16LE encoding to obfuscate it and bypass potential security filters.
3. **Crafting the Payload:**
The encoded command is embedded into a payload that is sent as part of an HTTP GET request to the target HFS server's vulnerable endpoint.
4. **Executing the Payload:**
When the HFS server processes the request, it decodes and executes the PowerShell command, establishing a reverse shell back to the attacker.
## Configuration
Ensure that the following configurations are correctly set before running the exploit:
- **`lhost`:** Your machine's IP address where Netcat is listening.
- **`lport`:** The port number on which Netcat is listening.
- **`rhost`:** The target machine's IP address running the vulnerable HFS server.
- **`rport`:** The port number of the target HFS server (default is 80).
Example configuration:
```python
lhost = "192.168.1.100"
lport = 1111
rhost = "192.168.1.105"
rport = 80
```
## Troubleshooting
- **No Reverse Shell Connection:**
- Verify that the target machine is running the vulnerable version of HFS.
- Ensure there are no firewalls blocking the connection on the specified ports.
- Confirm that `lhost` and `rhost` are correctly set and reachable.
- **Script Errors:**
- Ensure you are using Python 3.6 or higher.
- Check for any syntax errors or missing dependencies.
- **Netcat Issues:**
- Ensure Netcat is installed and accessible in your system's PATH.
- Use the correct flags (`-nlvp`) to start the listener.
## Contributing
Contributions are welcome! If you find any issues or have suggestions for improvements, please open an issue or submit a pull request.
1. **Fork the Repository**
2. **Create a Feature Branch**
```bash
git checkout -b feature/YourFeature
```
3. **Commit Your Changes**
```bash
git commit -m "Add Your Feature"
```
4. **Push to the Branch**
```bash
git push origin feature/YourFeature
```
5. **Open a Pull Request**
## Author
Developed by [Francesco Brina](https://github.com/francescobrina).
Email: francescobrina9@gmail.com
## License
This project is licensed under the [MIT License](LICENSE).
---
**Disclaimer:**
Use this tool responsibly and only on systems you have explicit permission to test. The author is not liable for any misuse or damage caused by this tool.
---
Feel free to let me know if you'd like any further adjustments!
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view