28 matches found
CVE-2025-31161
CVE-2025-31161 使用Go编写了针对影响crushFTP的CVE-2025-31161的漏洞利用程序。 使用方法 root@kitploit: ./exploit -target http://localhost:8085 -user crushadmin -action create-admin -new-admin-user username -new-admin-pass pass...
ShatteredFTP
Explotador Dual ShatteredFTP Descripción general Este script de exploit se dirige a vulnerabilidades en el proceso de creación/autenticación de usuarios de CrushFTP, ofreciendo soporte de modo dual: CVE-2025-2825 Explota una falla en el manejo de payloads XML durante la creación de usuarios...
CVE-2025-31161
CVE-2025-31161 - Script de Explotación de CrushFTP Descripción Este repositorio contiene un script en Python para interactuar con el servicio CrushFTP vulnerable a CVE-2025-31161. El script permite listar usuarios existentes y agregar un usuario malicioso explotando la vulnerabilidad...
CrushFTP - Authentication Bypass
CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability that may result in unauthenticated access. Remote and unauthenticated HTTP requests to CrushFTP may allow attackers to gain unauthorized access. id: CVE-2025-31161 info: name: CrushFTP - Authenticati...
Blackash-CVE-2025-31161
Blackash-CVE-2025-31161 CVE-2025-31161 CVE-2025-31161 / CVE-2025-2825 的概念验证 此 POC 将利用 authbypass 漏洞创建一个具有管理员级别权限的新用户账户。认证绕过需要 CrushFTP 服务器上现有用户的用户名（targetuser）。默认设置为 "crushadmin" 用法 root@kitploit: usage: cve-2025-31161.py -h --targethost TARGETHOST --port PORT --targetuser TARGETUSER --newuser...
crushftp_cve-2025-31161
CrushFTP 10.8.0 — CVE-2025-31161 易受攻击的构建版本 针对 CVE-2025-31161 授权渗透测试的预构建 CrushFTP 10.8.0 二进制文件。 !CAUTION 这是一个故意存在漏洞 的应用程序构建版本。 仅用于授权的安全测试和研究。 请勿部署在生产系统或暴露于不可信网络。 包含内容 发布资产 CrushFTP1010.8.04.zip 包含从 netlah/crushftp:10.8.04 Docker 镜像中提取的完整 CrushFTP 10.8.0 构建 4 应用程序。...
CVE-2025-31161_exploit
CVE-2025-31161 / CVE-2025-2825 Python 漏洞利用程序 要处理单个URL，请使用以下命令： python3 script.py -u http://example.com 要处理包含URL列表的文件（每行一个），请使用以下命令： python3 script.py -l urls.txt 要指定线程数，请使用 -t 参数。 脚本的运行结果（响应中包含 crushadmin 字符串的URL）将写入 output.txt 文件。...
CVE-2025-31161
CVE-2025-31161 Authentication bypass vulnerability in versions of the CrushFTP server...
Nuclei_CVE-2025-31161_CVE-2025-2825
此存储库没有 README。...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
Ansible Role: CrushFTP CVE-2025-31161 Ludushttps://ludus.c...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-3116...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 – Authentication Bypass in CrushFTP 👊 | Catego...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 - CrushFTP User Creation Authentication Bypass...
📄 CrushFTP 11.3.1 Authentication Bypass / Race Condition
CrushFTP versions prior to 10.8.4 and 11.3.1 suffer from an authentication bypass vulnerability via a race condition and header parsing logic flaw in the AWS4-HMAC authorization mechanism. Exploit Title: CrushFTP 11.3.1 - Authentication Bypass Date: 2025-05-15 Exploit Author: @İbrahimsql Exploit...
CrushFTP 11.3.1 - Authentication Bypass
Exploit Title: CrushFTP 11.3.1 - Authentication Bypass Date: 2025-05-15 Exploit Author: @İbrahimsql Exploit Author's github: https://github.com/ibrahimsql Vendor Homepage: https://www.crushftp.com Software Link: https://www.crushftp.com/download.html Version: =2.28.1 , colorama=0.4.6 ,...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 / CVE-2025-2825 python exploit Для обработки о...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CrushFTP CVE-2025-31161 Exploit Tool 🔓 Advanced detection an...
Exploit for CVE-2025-2825
It is an exploit module/toolkit targeting CrushedFTP. The tool,...
Imperva Customers Are Protected Against CVE-2025-31161 in CrushFTP
Introduction A critical security vulnerability, identified as CVE-2025-31161 previously tracked as CVE-2025-2825, has been discovered in CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0. This flaw allows unauthenticated remote attackers to access unpatched CrushFTP servers if...
