README.md

uftpd_dirtrav.py

A proof of concept that uploads arbitrary files and tries to automatically pop a shell on a uftpd server between versions 2.6 and 2.10 by finding a webserver directory.

uftpd_file_upload_chroot_escape.rb

An in-development Metasploit module. Currently does not function.