Remote Code Execution in Rejetto HTTP File Server 2.3x

Repository contains a single Python 3 proof-of-concept exploit and a README. The exploit (CVE-2014-6287_ZERO.py) targets Rejetto HttpFileServer (HFS) v2.3.x (CVE-2014-6287) and performs remote command execution by sending an HTTP GET request to the root path with a crafted `search` query parameter. The payload uses a null byte (`%00`) followed by an HFS template/macro injection pattern `{.+exec|<cmd>.}` where `<cmd>` is taken from the command-line and URL-encoded. The script takes three arguments (RHOST, RPORT, COMMAND), prints the fully constructed target URL, and issues the request via `urllib3.PoolManager()`. There is no interactive shell handling or response parsing; it is a straightforward command-execution trigger over the network.

Repository contains a single Python script (CVE-2014-6287.py) implementing an operational exploit for CVE-2014-6287 (Rejetto HFS macro injection/RCE). The script takes two CLI arguments (TARGET_IP, YOUR_IP), hardcodes the callback port to 4444, builds a PowerShell reverse-shell one-liner, Base64-encodes it as UTF-16LE for PowerShell’s -EncodedCommand, and injects it into the HFS macro syntax using the vulnerable HTTP endpoint: GET /?search=%00{.exec|<command>.}. On success, the target executes the command and connects back to the attacker’s listener, providing an interactive PowerShell prompt over the TCP session.

This repository contains a Python 3 exploit for CVE-2014-6287, targeting Rejetto HTTP File Server (HFS) v2.3.x on Windows. The exploit leverages a remote command execution vulnerability to upload and execute a VBScript on the target, which downloads nc.exe (netcat) from the attacker's HTTP server. The script then executes nc.exe to establish a reverse shell back to the attacker's listener, granting remote command execution with system privileges. The repository consists of three files: a LICENSE, a README.md with detailed usage instructions, and the main exploit script (exploit.py). The exploit is fully parameterized, requiring the user to specify target and attacker IPs and ports. No hardcoded values are present, and the exploit is operational, providing a working reverse shell if the target is vulnerable and properly configured.

This repository contains a Rust-based exploit for CVE-2014-6287, a critical remote code execution vulnerability in Rejetto HTTP File Server (HFS) versions 2.3x before 2.3c. The exploit is implemented in a single Rust source file (src/main.rs) and leverages the vulnerable macro processing in HFS to inject and execute a PowerShell reverse shell payload. The attacker provides their own IP and port (for the reverse shell to connect back), as well as the target's IP and port. The exploit crafts a malicious HTTP GET request to the HFS server's search endpoint, embedding a base64-encoded PowerShell command that establishes a reverse shell to the attacker's machine. The repository includes standard Rust project files and a README with detailed usage instructions. The exploit is operational, providing a working reverse shell if the target is vulnerable and accessible.

This repository provides a working exploit for CVE-2014-6287, targeting Rejetto HTTP File Server (HFS) 2.3.x on Windows. The exploit consists of a single Python script (exploit.py) and a README.md with usage instructions. The exploit works by sending specially crafted HTTP requests to the vulnerable HFS server, leveraging a command injection vulnerability. The attack sequence is as follows: (1) a VBS script is delivered to the target to download Netcat (nc.exe) from the attacker's HTTP server, (2) the script is executed to save Netcat to disk, and (3) Netcat is run to establish a reverse shell back to the attacker's listener. The attacker must set up both a netcat listener and an HTTP server hosting nc.exe. The exploit is operational and provides remote command execution on the target if successful. The code is straightforward, with clear separation of payload delivery, execution, and reverse shell triggering. No detection or scanning functionality is present; this is a direct exploitation tool.

This repository contains a single Metasploit module (rejetto_hfs_exec.rb) that exploits a remote command execution vulnerability (CVE-2014-6287) in Rejetto HttpFileServer (HFS) version 2.3b and below on Windows. The exploit abuses a flaw in HFS's scripting command parser, allowing an attacker to inject commands via a specially crafted HTTP GET request using a '%00' filter bypass. The module works by sending a request that saves a malicious VBS script to the target's %TEMP% directory, then executes it. The VBS script downloads and runs a Metasploit-generated payload (EXE) from the attacker's HTTP server. The exploit is fully weaponized, supporting customizable payloads and automatic cleanup. The only file in the repository is a Ruby script structured as a standard Metasploit exploit module, leveraging Metasploit's libraries for HTTP interaction, payload generation, and file dropping. The main attack vector is network-based, targeting the HFS web interface.

This repository contains a proof-of-concept exploit for CVE-2014-6287, a remote code execution vulnerability in Rejetto HFS (HTTP File Server) version 2.3. The repository consists of a detailed README.md explaining the vulnerability, exploitation steps, and a Python script (rce.py) that automates the attack. The exploit works by sending a specially crafted HTTP GET request to the target's /?search= endpoint, injecting a null byte and an {.exec|...} macro to execute arbitrary commands. The script requires the user to supply a PowerShell Base64-encoded reverse shell payload, which will be executed on the target if the exploit is successful. The attack vector is network-based, targeting the HTTP interface of HFS. The code checks the server version before attempting exploitation and opens a netcat listener for the reverse shell. No hardcoded IPs or domains are present; the user supplies the target URL. The exploit is a functional POC and not weaponized, as it requires manual payload insertion and user interaction.