
This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.
This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.
CVE-2015-3306 is a vulnerability found in ProFTPd 1.3.5 due to a flaw in the mod_copy module, which is responsible for enabling FTP file copy operations. This vulnerability allows a THM player to copy SSH private key to a share and mount it on local system, which allows the THM player to connect to the user using SSH private key.
sudo apt-get updatesudo apt-get install gitgit clone https://github.com/Z3R0-0x30/CVE-2015-3306.gitcd CVE-2015-3306python3 Z3R0_ProFTPexploit.py [target-IP] [SSH private key location] [destination to copy the private key]python3 Z3R0_ProFTPexploit.py 10.10.132.123 /home/user/.ssh/id_rsa /var/tmp/id_rsa