The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
[POC] CVE-2015-3306 — exploit-CVE-2015-3306
ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container
[POC] CVE-2015-3306 — propane
Exploits the arbitrary file write bug in proftpd (CVE-2015-3306) attempts code execution
[POC] CVE-2015-3306 — cpx_proftpd
Tool for exploit CVE-2015-3306
[POC] CVE-2015-3306 — proftpd_bypass
An implementation of CVE-2015-3306
[POC] CVE-2015-3306 — CVE-2015-3306
ProFTPd 1.3.5 - File Copy
[POC] CVE-2015-3306 — CVE-2015-3306
This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.
[POC] CVE-2015-3306 — ProFTPd-1.3.5-mod_copy-Remote-Command-Execution
Script that exploits the vulnerability of the ProFTP 1.3.5 service with CVE-2015-3306
[POC] CVE-2015-3306 — CVE-2015-3306-
PoC for CVE-2015-3306 a arbitrary file write vulnerability in ProFTPd 1.3.5
[POC] CVE-2015-3306 — cve-2015-3306-lab
Reproducible Docker lab + raw-socket exploit for CVE-2015-3306 (ProFTPD mod_copy pre-auth arbitrary file copy) — a patch-diffing learning exercise
[POC] CVE-2015-3306 — CVE-2015-3306-Python-PoC
Converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development
PoC: OpenVAS-Vulnerability-Analysis-Incident-Response-Report
Real-World Simulation: FTP Service Exploitation (ProFTPD CVE-2015-3306)
PoC: proftpd-mod_copy-cve-2015-3306
Exploitation report for ProFTPD 1.3.5 mod_copy (CVE-2015-3306) lab.
PoC: CVE-2015-3306-Home-Lab
CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing
PoC: hackviser_labs_CVE-2015-3306
This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.
PoC: cve-2015-3306
cve-2015-3306 docker image
PoC: cve-2015-3306
cve-2015-3306
AV:N/AC:L/Au:N/C:C/I:C/A:C
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free