Brosec

Overview tl;dr Brosec is a terminal based reference utility designed to help us infosec bros and broettes with useful yet sometimes complex payloads and commands that are often used during work as infosec practitioners. An example of one of Brosec's most popular use cases is the ability to genera...

FTPBuster

FTPBuster FTPBuster is a powerful command-line brute-forcing tool designed to brute-force FTP, SFTP, and explicit FTPS servers by performing dictionary-based attacks. It is intended for ethical hacking and penetration testing Features Brute-force support for FTP , SFTP , and explicit FTPS AUTH TL...

Wing FTP Server <= 7.4.3 - Remote Code Execution

Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execution RCE flaw CVE-2025-47812. The vulnerability arises from improper NULL byte handling in the 'username' parameter during login, which allows Lua code injection into session files. These injected sessio...

PT-2026-140441

Improper access control in Progress WS FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain folder-management permissions to bypass access restrictions and access or modify files belonging to other users...

PT-2026-140444

Name of the Vulnerable Software and Affected Versions WS FTP Server versions prior to 2025.0.5 Description On Windows, the software may write sensitive user credentials and session data to a temporary file during file transfer operations. Recommendations Update to version 2025.0.5...

PT-2026-140443

Insufficient resource limits in Progress Software WS FTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service...

PT-2026-140440

Incorrect quota accounting in Progress Software WS FTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service...

PT-2026-140445

Name of the Vulnerable Software and Affected Versions Progress Software WS FTP Server versions prior to 2025.0.5 Description Improper access restrictions in the Thin Client Web Transfer component on Windows allow an authenticated FTP user to access files outside their intended scope...

PT-2026-140442

Insufficient protection of communications in Progress WS FTP Server versions prior to 2025.0.5 could allow a network attacker to intercept sensitive information or modify requests when unencrypted connections are used...

Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie

Wing FTP Server versions prior to 7.4.4 are vulnerable to an authenticated information disclosure vulnerability CVE-2025-47813. The vulnerability occurs due to improper validation of the 'UID' session cookie in the /loginok.html endpoint. Supplying an overlong UID value causes the server to respo...

Explotando-FreeFloatFTP-CVE-2025-5548

Exploiting-FreeFloatFTP-CVE-2025-5548 Welcome to my exploit research and development repository. This project documents the full technical analysis, environment setup, and step-by-step exploitation of CVE-2025-5548 Stack-Based Buffer Overflow found in FreeFloat FTP Server. 🌱 Personal note: This...

CVE-2025-47812-PoC

CVE-2025-47812 — Wing FTP Server Remote Code Execution RCE Overview Field| Value ---|--- CVE| CVE-2025-47812 Affected| Wing FTP Server 7.4.4 Type| Unauthenticated Remote Code Execution CVSS Score| 10.0 Critical Fixed in| Wing FTP Server 7.4.4 How it works The vulnerability exists in the...

CVE-2025-5548

CVE-2025-5548 Security research and technical analysis of CVE-2025-5548, a buffer overflow vulnerability affecting FreeFloat FTP Server 1.0. This repository documents vulnerability behaviour, attack surface analysis, controlled proof of concept testing, and defensive observations within a safe la...

CVE-2025-5548

🐞 CVE-2025-5548: FreeFloat FTP Server 1.0 Buffer Overflow Professional research and exploit development for a classic stack-based buffer overflow in FreeFloat FTP Server 1.0. This laboratory demonstrates the transition from binary reversing to a fully functional RCE. 📖 Executive Summary This...

vsftpd2.3.4-backdoor-exploit

vsftp2.3.4-backdoor-exploit vsftpd 2.3.4 Backdoor Exploit CVE-2011-2523 Requirements Python 3.11+ recommended psutil Python package Installation Windows 1. Make sure Python is installed: py --version 2. Install dependencies: py -m pip install psutil 3. Run the script: py vsftpd234backdoor.py macO...

CVE-2025-47812

CVE-2025-47812 Improper input validation led to Remote Code Execution to full system compromise 📘 Introduction: Julien Ahrens from RCE Security discovered a critical security vulnerability impacting WingFTP. Tracked as CVE-2025-47812, the vulnerability has a CVSS score of 10. Successful...

hook

Hook Hook exploits a parameter injection vulnerability in the WatchGuard SSH interface. The vulnerability allows a low privileged user to exfiltrate arbitrary system files to an attacker controlled FTP server. Fortunately, there is a builtin low privileged user named status that this script...

cve-2025-5548-freefloat-ftp-walkthrough

CVE-2025-5548 – FreeFloat FTP Server 1.0 Walkthrough Repository where we document step by step the analysis and controlled exploitation of CVE-2025-5548 on FreeFloat FTP Server 1.0 within a laboratory environment. In this project we do not limit ourselves to running a pre-made exploit. Our goal i...

CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow

CVE-2025-5548 — Buffer Overflow in FreeFloat FTP Server 1.0 Vulnerability analysis and exploitation lab · Exploit Development · Windows x86 What is this repository about? This repository fully documents the analysis and exploitation process of the CVE-2025-5548 vulnerability, a stack-based buffer...

CVE-2025-5548

🐞 CVE-2025-5548: FreeFloat FTP Server 1.0 - Stack-Based Buffer Overflow Buffer overflow in FreeFloat FTP Server 1.0 illustrating how a single unsafe handler can generate multiple CVE entries across different commands. 📑 Table of Contents Why this repository exists Why this vulnerability is...