31 matches found
CVE-2025-31161
CVE-2025-31161 Authentication bypass vulnerability in versions of the CrushFTP server...
Nuclei_CVE-2025-31161_CVE-2025-2825
This repository does not have a README...
ShatteredFTP
ShatteredFTP Dual exploiter Overview This exploit script targets vulnerabilities in CrushFTP’s user creation/authentication process, offering dual mode support: CVE-2025-2825 Exploits a flaw in XML payload handling during user creation. Use this when your target’s web interface responds per the...
CVE-2025-31161_exploit
CVE-2025-31161 / CVE-2025-2825 python exploit To process a single URL, use the command: python3 script.py -u http://example.com To process a file containing a list of URLs one per line, use the command: python3 script.py -l urls.txt To specify the number of threads, use the -t flag. The script...
CrushFTP - Authentication Bypass
CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability that may result in unauthenticated access. Remote and unauthenticated HTTP requests to CrushFTP may allow attackers to gain unauthorized access. id: CVE-2025-31161 info: name: CrushFTP - Authenticati...
crushftp_cve-2025-31161
CrushFTP 10.8.0 — CVE-2025-31161 Vulnerable Build Pre-built CrushFTP 10.8.0 binary for authorized penetration testing of CVE-2025-31161. !CAUTION This is an intentionally vulnerable application build. For authorized security testing and research only. Do not deploy on production systems or expose...
crushftp_cve-2025-31161
CrushFTP 10.8.0 — Compilación vulnerable a CVE-2025-31161 Binario precompilado de CrushFTP 10.8.0 para pruebas de penetración autorizadas de CVE-2025-31161. !CAUTION Esta es una compilación de aplicación intencionalmente vulnerable. Solo para pruebas de seguridad e investigación autorizadas. No l...
ludus_crushftp_cve-2025-31161_sim
Ruolo Ansible: Simulazione CrushFTP CVE-2025-31161 Ludus Ruolo complementare per luduscrushftpcve-2025-31161 che aggiunge un livello di scenario realistico sopra l'istanza vulnerabile di CrushFTP. !NOTE Questo ruolo richiede che il ruolo principale luduscrushftpcve-2025-31161 venga applicato prim...
Blackash-CVE-2025-31161
Blackash-CVE-2025-31161 CVE-2025-31161 Prova di concetto per CVE-2025-31161 / CVE-2025-2825 Questa POC sfrutta la vulnerabilità di bypass dell'autenticazione per creare un nuovo account utente con permessi di livello Admin. Il bypass dell'autenticazione richiede il nome utente targetuser di un...
CVE-2025-31161
Exploit CVE-2025-31161 INSTALLAZIONE 1. root@kitploit: git clone https://github.com/cesarbtakeda/CVE-2025-31161.git && cd CVE-2025-31161 2. Modalità di utilizzo root@kitploit: sudo exploit2.py -h -u HOST -p PORT -tu TARGETUSER -nu NEWUSER -np PASSWORD oppure 1. Dipende dalla libreria lcurl...
CVE-2025-31161
CVE-2025-31161 - Script di Exploit per CrushFTP Descrizione Questo repository contiene uno script Python per interagire con il servizio CrushFTP vulnerabile a CVE-2025-31161 Lo script consente di elencare gli utenti esistenti e di aggiungere un utente malevolo sfruttando la vulnerabilità...
CVE-2025-31161
CVE-2025-31161 Escrevi um exploit em Go para o CVE-2025-31161 que afeta o crushFTP. Uso root@kitploit: ./exploit -target http://localhost:8085 -user crushadmin -action create-admin -new-admin-user username -new-admin-pass pass...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
Ansible Role: CrushFTP CVE-2025-31161 Ludushttps://ludus.c...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-3116...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 – Authentication Bypass in CrushFTP 👊 | Catego...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 - CrushFTP User Creation Authentication Bypass...
📄 CrushFTP 11.3.1 Authentication Bypass / Race Condition
CrushFTP versions prior to 10.8.4 and 11.3.1 suffer from an authentication bypass vulnerability via a race condition and header parsing logic flaw in the AWS4-HMAC authorization mechanism. Exploit Title: CrushFTP 11.3.1 - Authentication Bypass Date: 2025-05-15 Exploit Author: @İbrahimsql Exploit...
CrushFTP 11.3.1 - Authentication Bypass
Exploit Title: CrushFTP 11.3.1 - Authentication Bypass Date: 2025-05-15 Exploit Author: @İbrahimsql Exploit Author's github: https://github.com/ibrahimsql Vendor Homepage: https://www.crushftp.com Software Link: https://www.crushftp.com/download.html Version: =2.28.1 , colorama=0.4.6 ,...