Modified-CVE-2015-3306-Exploit

Modified-CVE-2015-3306-Exploit How to 1. Create a php reverse shell 2. Start server to host shell in the same directory python3 -m http.server 3. Start netcat listener on local port of choice example: nc -nlvp port of choice 4. Run exploit example provided below python3 modifiedCVE20153306.py...

proftpd_bypass

This tool uses a specially craffted chain of commands to exploit CVE-2015-3306 and bypass the authentication system of ProFTPD's modcopy. It can be downloaded here you will need to run it from the command line Usage: proftpdbypass target port lcopy within target/rcopy to target lpath rpath...

cve-2015-3306

CVE-2015-3306 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-3306 Image author: https://github.com/t0kx/exploit-CVE-2015-3306...

cve-2015-3306

cve-2015-3306 docker image hackarada/cve-2015-3306 Intended for personal use root@kitploit: docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...

OpenVAS-Vulnerability-Analysis-Incident-Response-Report

OpenVAS-漏洞分析-事件响应报告 真实场景模拟：FTP服务漏洞利用（ProFTPD CVE-2015-3306） 真实场景模拟：FTP服务漏洞利用（ProFTPD CVE-2015-3306） 📌 概述 本项目演示了在受控实验室环境中使用 OpenVAS Greenbone Vulnerability Manager 进行全周期漏洞评估和事件响应的工作流程。 目标是识别一个已知的FTP漏洞（ vsftpd 后门 ）。然而，通过实际分析和验证，发现并调查了一个不同的严重漏洞 ——这展示了基于真实分析而非假设的报告方式，体现了真实分析师决策过程。 🎯 关键成果 识别了 ProFTPD...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC 这是从 metasploit 模块调整转换而来，作为 OSCP 学习和漏洞利用开发的练习。它最初来自用 searchsploit 搜索随机远程命令执行模块。我分析了 metasploit 代码并将其转换成了 python。 验证截图：...

hackviser_labs_CVE-2015-3306

hackviserlabsCVE-2015-3306 这是一个定制脚本，用于帮助你在 CVE-2015-3306 实验室中完成远程代码执行任务。 使用以下命令运行它： python3 exploit.py 将 替换为你从 hackviser 平台上启动实验室后获得的地址。...

ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

ProFTPd-1.3.5-modcopy-Remote-Command-Execution 利用 CVE-2015-3306 漏洞攻击 ProFTP 1.3.5 服务的脚本 用法 .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...

proftpd-mod_copy-cve-2015-3306

ProFTPD 1.3.5 modcopy Vulnerability CVE-2015-3306 This repository contains the lab report for exploiting a vulnerable ProFTPD 1.3.5 service in the Hackviser platform. The lab demonstrates unauthorized access to a sensitive file secret.txt using the modcopy vulnerability CVE-2015-3306. Detailed...

cpx_proftpd

cpxproftpd PoC by Daniel Aldana for CVE-2015-3306 exploitation. Bug reported by Vadim Melihow. METHOD 1: usage: root@kitploit: python cpxproftp.py ex: root@kitploit: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt then try: root@kitploit: http://127.0.0.1/pass.txt METHOD 2: usage:...

propane

propane Exploits the arbitrary file write bug in ProFTPD's modcopy module CVE-2015-3306 and attempts code execution...

ProFTPD_CVE-2015-3306

m4ud ProFTPD 1.3.5 RCE exploit CVE : 2015-3306! root@kitploit: ProFTPd 1.3.5 RCE Usage: ProFTPD.py options Options: -h, --help show this help message and exit -l LHOST, --lhost=LHOST Local IP Required for Reverse Shell, -p LPORT, --lport=LPORT Port Required for Reverse Shell, -t TARGET,...

CY376_-AHENKORA_JOSEPH-

CY376 Red Team Project — Exploiting Known CVEs in a Deliberate...

cybersecurity-exam-report

Cybersecurity Exam Project: ProFTPD Exploitation and MySQL Dat...

Exploit for Improper Access Control in Proftpd

OpenVAS-Vulnerability-Analysis-Incident-Response-Report Real-W...

ProFTPd 1.3.5 - (mod_copy) Remote Command Execution Exploit (2)

Exploit Title: ProFTPd 1.3.5 - 'modcopy' Remote Command Execution 2 Exploit Author: Shellbr3ak Version: 1.3.5 Tested on: Ubuntu 16.04.6 LTS CVE : CVE-2015-3306 !/usr/bin/env python3 import sys import socket import requests def exploitclient, target: client.connecttarget,21 Connecting to the targe...

ProFTPd 1.3.5 Remote Command Execution

Exploit Title: ProFTPd 1.3.5 - 'modcopy' Remote Command Execution 2 Date: 25/05/2021 Exploit Author: Shellbr3ak Version: 1.3.5 Tested on: Ubuntu 16.04.6 LTS CVE : CVE-2015-3306 !/usr/bin/env python3 import sys import socket import requests def exploitclient, target: client.connecttarget,21...

ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)

Exploit Title: ProFTPd 1.3.5 - 'modcopy' Remote Command Execution 2 Date: 25/05/2021 Exploit Author: Shellbr3ak Version: 1.3.5 Tested on: Ubuntu 16.04.6 LTS CVE : CVE-2015-3306 !/usr/bin/env python3 import sys import socket import requests def exploitclient, target: client.connecttarget,21...

Mail.ru: [files.ucs.ru] ProFTPd mod_copy Arbitrary Read/Write

CVE-2015-3306 in opened to external network FTP server on files.ucs.ru...

CVE-2019-12815

An arbitrary file copy vulnerability in modcopy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306...