module

ColoradoFTP Server 1.3 Build 8 Directory Traversal Information Disclosure

Try Surface Command
Back to search
Disclosed
Aug 11, 2016
Created
May 30, 2018

Description

This module exploits a directory traversal vulnerability found in ColoradoFTP server
version from the server GET/PUT command including file system traversal strings starting with '\\'.
The server is written in Java and therefore platform independent, however this vulnerability is only
exploitable on the Windows version.

Authors

h00die mike@shorebreaksecurity.com
RvLaboratory

Platform

Windows

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use auxiliary/scanner/ftp/colorado_ftp_traversal
    msf auxiliary(colorado_ftp_traversal) > show actions
        ...actions...
    msf auxiliary(colorado_ftp_traversal) > set ACTION < action-name >
    msf auxiliary(colorado_ftp_traversal) > show options
        ...show and set options...
    msf auxiliary(colorado_ftp_traversal) > run
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today