FileZilla Server Privilege Escalation

 

Figure-FileZilla

FileZilla ServerA lot of cool people know how to raise the right. It's very simple. I'll be jealous again.

The administrator password and port are stored in the FileZilla Server Interface. xml file.

The content of FileZilla Server Interface. xml is roughly as follows:

 
 

  
  
<FileZillaServer>  
  
  
<Settings>  
  
  
<Item name="Last Server Port" type="numeric">14147</Item>  
  
  
<Item name="Last Server Password" type="cool"/>  
  
  
<Item name="Always use last server" type="numeric">1</Item>  
  
  
<Item name="User Sorting" type="numeric">0</Item>  
  
  
<Item name="Last Server Address" type="string">127.0.0.1</Item>  
  
  
</Settings>  
  
  
</FileZillaServer>  
 
 

The port is 14147, And the password is cool. 14147 is the Management port, for example, su 43859.

The FileZilla Server. xml file is the FileZilla Server. xml user password used to save the ftp user password. It is a 32-bit encrypted md5

The contents of FileZilla Server. xml are as follows:

 
 

  
  
<FileZillaServer>  
  
  
<Settings>  
  
  
<Item name="Admin port" type="numeric">14147</Item>  
  
  
</Settings>  
  
  
<Groups/>  
  
  
<Users>  
  
  
<User Name="abc">  
  
  
<Option Name="Pass">900150983cd24fb0d6963f7d28e17f72</Option>  
  
  
<Option Name="Group"/>  
  
  
<Option Name="Bypass server userlimit">0</Option>  
  
  
<Option Name="User Limit">0</Option>  
  
  
<Option Name="IP Limit">0</Option>  
  
  
<Option Name="Enabled">1</Option>  
  
  
<Option Name="Comments"/>  
  
  
<Option Name="ForceSsl">0</Option>  
  
  
<IpFilter>  
  
  
<Disallowed/>  
  
  
<Allowed/>  
  
  
</IpFilter>  
  
  
<Permissions>  
  
  
<Permission Dir="E:">  
  
  
<Option Name="FileRead">1</Option>  
  
  
<Option Name="FileWrite">1</Option>  
  
  
<Option Name="FileDelete">1</Option>  
  
  
<Option Name="FileAppend">0</Option>  
  
  
<Option Name="DirCreate">1</Option>  
  
  
<Option Name="DirDelete">1</Option>  
  
  
<Option Name="DirList">1</Option>  
  
  
<Option Name="DirSubdirs">1</Option>  
  
  
<Option Name="IsHome">1</Option>  
  
  
<Option Name="AutoCreate">0</Option>  
  
  
</Permission>  
  
  
</Permissions>  
  
  
<SpeedLimits DlType="0" DlLimit="10" ServerDlLimitBypass="0" UlType="0" UlLimit="10" ServerUlLimitBypass="0">  
  
  
<Download/>  
  
  
<Upload/>  
  
  
</SpeedLimits>  
 
 

 
 

  
  
<User Name = "abc"> User Name <Option Name = "Pass"> 900150983cd24fb0d6963f7d28e17f72 </Option> is the User password.
 
 

 
 

  
  
<Permission Dir = "E:">
  
  
<Option Name = "FileRead"> 1 </Option>
  
  
<Option Name = "FileWrite"> 1 </Option>
  
  
<Option Name = "FileDelete"> 1 </Option>
  
  
<Option Name = "FileAppend"> 0 </Option>
  
  
<Option Name = "DirCreate"> 1 </Option>
  
  
<Option Name = "DirDelete"> 1 </Option>
  
  
<Option Name = "DirList"> 1 </Option>
  
  
<Option Name = "DirSubdirs"> 1 </Option>
  
  
<Option Name = "IsHome"> 1 </Option>
  
  
<Option Name = "AutoCreate"> 0 </Option> permission of the user
 
 

Now, let's introduce how to use it. You just need to forward port 14147 and then use the management password to log in and add users.

Let's demonstrate it.

Forward the port

Enable FileZilla Server locally and enter the IP port password.

Success

Through the introduction of this article, we will know that the FileZilla Server privilege escalation is useful to everyone!