Exploit for proftpd_bypass

kitploit · 2026-08-26

Description

Authentication bypass in ProFTPD mod_copy via crafted command chain exploiting CVE-2015-3306.

Entry point

Parameter/proc/self/cmdline · path

Path/proc/self/cmdline

Copy from /proc/self/cmdline via SITE CPFR/CPTO to write a PHP payload into a temporary location (FTP-based exploit).

Affected Proftpd versions

Proftpd= 1.3.5

All known vulnerabilities by product

Alt Linux Proftpd

CVSS 10.0 for CVE-2015-3306

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

References

https://github.com/jptr218/proftpd_bypass/raw/main/proftpd_bypass.exe

Exploit Details

Modified:2026-08-26 06:12

Last Seen:2026-08-26 06:58

Reporter:KitPloit

Tags

ProFTPDmod_copyauthentication bypassCVE-2015-3306command chain

Other exploits for CVE-2015-3306

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

Modified-CVE-2015-3306-Exploit

2026-09-07 KitPloitKITPLOIT

CVE-2015-3306-Python-PoC

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

Exploit for Improper Access Control in Proftpd

2026-09-07 diegslvaGITHUB

Exploit Code

MARKDOWN8 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JPTR218-PROFTPD_BYPASS
### यह उपकरण CVE-2015-3306 का उपयोग करते हुए एक विशेष रूप से तैयार की गई कमांड श्रृंखला का उपयोग करता है ताकि ProFTPD के mod_copy की प्रमाणीकरण प्रणाली को दरकिनार किया जा सके।

## इसे यहाँ से डाउनलोड किया जा सकता है (आपको इसे कमांड लाइन से चलाना होगा)

### उपयोग विधि:

### `proftpd_bypass [target] [port] [(l)copy within target/(r)copy to target] [lpath] [rpath]`