31 matches found
ludus_crushftp_cve-2025-31161
Ansible Role: CrushFTP CVE-2025-31161 Ludus An Ansible Role that deploys a vulnerable CrushFTP 10.8.0 instance on Windows for authorized penetration testing of CVE-2025-31161 authentication bypass. The vulnerable CrushFTP binary is hosted at rufflabs/crushftpcve-2025-31161 and downloaded...
ludus_crushftp_cve-2025-31161_sim
Ansible Role: CrushFTP CVE-2025-31161 Simulation Ludus Companion role for luduscrushftpcve-2025-31161 that adds a realistic scenario layer on top of the vulnerable CrushFTP instance. !NOTE This role requires the main luduscrushftpcve-2025-31161 role to be applied first. What It Does Simulated...
CVE-2025-31161
CVE-2025-31161 Authentication bypass vulnerability in versions of the CrushFTP server...
ShatteredFTP
ShatteredFTP Dual exploiter Overview This exploit script targets vulnerabilities in CrushFTP’s user creation/authentication process, offering dual mode support: CVE-2025-2825 Exploits a flaw in XML payload handling during user creation. Use this when your target’s web interface responds per the...
CrushFTP - Authentication Bypass
CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability that may result in unauthenticated access. Remote and unauthenticated HTTP requests to CrushFTP may allow attackers to gain unauthorized access. id: CVE-2025-31161 info: name: CrushFTP - Authenticati...
Nuclei_CVE-2025-31161_CVE-2025-2825
This repository does not have a README...
CVE-2025-31161_exploit
CVE-2025-31161 / CVE-2025-2825 python exploit To process a single URL, use the command: python3 script.py -u http://example.com To process a file containing a list of URLs one per line, use the command: python3 script.py -l urls.txt To specify the number of threads, use the -t flag. The script...
CVE-2025-31161
CVE-2025-31161 - CrushFTP Exploit Script Description This repository contains a Python script to interact with the CrushFTP service vulnerable to CVE-2025-31161 The script allows you to list existing users and add a malicious user by exploiting the vulnerability. Features Check if the host is up...
CVE-2025-31161
CVE-2025-31161 エクスプロイト インストール 1. git clone https://github.com/cesarbtakeda/CVE-2025-31161.git && cd CVE-2025-31161 2. 使用方法 sudo exploit2.py -h -u HOST -p PORT -tu TARGETUSER -nu NEWUSER -np PASSWORD または 1. lcurl ライブラリに依存 git clone https://github.com/cesarbtakeda/CVE-2025-31161.git && cd...
CVE-2025-31161
CVE-2025-31161 Wrote an exploit in Go for CVE-2025-31161 affecting crushFTP. Usage ./exploit -target http://localhost:8085 -user crushadmin -action create-admin -new-admin-user username -new-admin-pass pass...
Blackash-CVE-2025-31161
Blackash-CVE-2025-31161 CVE-2025-31161 CVE-2025-31161 / CVE-2025-2825 的概念验证 此 POC 将利用 authbypass 漏洞创建一个具有管理员级别权限的新用户账户。认证绕过需要 CrushFTP 服务器上现有用户的用户名（targetuser）。默认设置为 "crushadmin" 用法 usage: cve-2025-31161.py -h --targethost TARGETHOST --port PORT --targetuser TARGETUSER --newuser NEWUSER --passwor...
crushftp_cve-2025-31161
CrushFTP 10.8.0 — CVE-2025-31161 Vulnerable Build Pre-built CrushFTP 10.8.0 binary for authorized penetration testing of CVE-2025-31161. !CAUTION This is an intentionally vulnerable application build. For authorized security testing and research only. Do not deploy on production systems or expose...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
Ansible Role: CrushFTP CVE-2025-31161 Ludushttps://ludus.c...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-3116...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 – Authentication Bypass in CrushFTP 👊 | Catego...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 - CrushFTP User Creation Authentication Bypass...
📄 CrushFTP 11.3.1 Authentication Bypass / Race Condition
CrushFTP versions prior to 10.8.4 and 11.3.1 suffer from an authentication bypass vulnerability via a race condition and header parsing logic flaw in the AWS4-HMAC authorization mechanism. Exploit Title: CrushFTP 11.3.1 - Authentication Bypass Date: 2025-05-15 Exploit Author: @İbrahimsql Exploit...
CrushFTP 11.3.1 - Authentication Bypass
Exploit Title: CrushFTP 11.3.1 - Authentication Bypass Date: 2025-05-15 Exploit Author: @İbrahimsql Exploit Author's github: https://github.com/ibrahimsql Vendor Homepage: https://www.crushftp.com Software Link: https://www.crushftp.com/download.html Version: =2.28.1 , colorama=0.4.6 ,...