uftpd_dirtrav icon indicating copy to clipboard operation
uftpd_dirtrav copied to clipboard

A proof of concept exploit that tries to pop you a shell on a uftpd server between versions 2.6 and 2.10

uftpd_dirtrav.py

A proof of concept that uploads arbitrary files and tries to automatically pop a shell on a uftpd server between versions 2.6 and 2.10 by finding a webserver directory.

uftpd_dirtrav.py demonstration

uftpd_file_upload_chroot_escape.rb

An in-development Metasploit module. Currently does not function.