Directory Traversal in Timbuktu Pro tb2ftp.dll Notes Feature

This repository contains a single Metasploit module targeting a directory traversal and file upload vulnerability (CVE-2008-1117) in Motorola Timbuktu Pro for Windows version 8.6.5. The exploit connects to the target's file upload service on TCP port 407 and abuses a directory traversal flaw to upload a custom executable payload (such as a reverse shell) to a startup folder, ensuring execution with elevated privileges. The module is written in Ruby and leverages Metasploit's payload generation and TCP communication libraries. The main exploit logic is contained in the 'exploit' method, which crafts and sends a series of protocol-specific packets to the vulnerable service, culminating in the upload and execution of the attacker's payload. The repository is operational and provides a working exploit for remote code execution on affected systems.