rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

This repository contains Detailed explanation and working poc for Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution.

Configuration:

Create a netcat listner.

nc -lnvp 1234

Change the attacker ip to your ip and port.

Also create a http file server on the same directory where nc.exe exists.

python -m http.server 80

Usage:

python exploit.py <target-ip> <target-port>

Note: You may need to run the payload multiple time to get a reverse shell.

Reference

https://www.exploit-db.com/exploits/39161

https://www.exploit-db.com/exploits/34668

https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/