CVE-2025-47812-poC

Simple exploit for Wing FTP Server RCE (CVE-2025-47812) to run commands and get a reverse shell. For educational use only.

Vulnerability Details

This security vulnerability was publicly disclosed and detailed by RCESecurity (https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/).

The exploit was developed by me for educational and testing purposes. I am not the original discoverer of the vulnerability.

Wing FTP Server RCE (CVE-2025-47812)

The vulnerability exists due to improper handling of NULL bytes in the username parameter during login in Wing FTP Server versions 7.4.3 and earlier. This allows unauthenticated attackers to inject Lua code into session files, leading to remote code execution with elevated privileges.

This PoC exploit allows:

Arbitrary command execution on the vulnerable server. Opening a reverse shell connection for interactive access.

Usage and poC video:

python CVE-2025-47812-poC.py

1. Run command: It allows you to run commands directly on the target server. Enter the target URL and username, then provide the command to execute and receive its output.
2. Get Reverse Shell: It allows you obtain a reverse shell on the server. Specify your LHOST and LPORT values to establish the reverse shell connection.

Affected Versions