---
title: "Discussion on \"Detecting Exploitation of CrushFTP Vulnerability (CVE-2025-31161) With PacketSmith Yara Detection Module - Using track_state and flow_state\" | Hashnode"
description: "Discussion on \"Detecting Exploitation of CrushFTP Vulnerability (CVE-2025-31161) With PacketSmith Yara Detection Module - Using track_state and flow_state\". Introduction\nThis vulnerability was found by Outpost24 under the identifier CVE-2025-31161 (previously reported as CVE-2025-2825). Outpost24 and other vendors and security researchers have shared enou"
url: "https://hashnode.com/posts/detecting-exploitation-of-crushftp-vulnerability-cve-2025-31161-with-packetsmith-yara-detection-module-using-track-state-and-flow-state/6a05a811baf09db7a6ea10b0"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Detecting Exploitation of CrushFTP Vulnerability (CVE-2025-31161) With PacketSmith Yara Detection Module - Using track\_state and flow\_state](https://blog.netomize.ca/detecting-exploitation-of-crushftp-vulnerability-cve-2025-31161-with-packetsmith-yara-detection-module-using-track-state-and-flow-state?utm_source=hashnode&utm_medium=feed)

Introduction This vulnerability was found by Outpost24 under the identifier CVE-2025-31161 (previously reported as CVE-2025-2825). Outpost24 and other vendors and security researchers have shared enou

May 14 · 8 min read · blog.netomize.ca  
Read the article

-   [#packetsmith](https://hashnode.com/tag/packetsmith)
-   [#pcap](https://hashnode.com/tag/pcap)
-   [#cve-2025-31161](https://hashnode.com/tag/cve-2025-31161)
-   [#yara-x](https://hashnode.com/tag/yara-x)
-   [#vulnerability](https://hashnode.com/tag/vulnerability)
-   [#detection-engineering](https://hashnode.com/tag/detection-engineering)
-   [#network-traffic](https://hashnode.com/tag/network-traffic)
-   [#crushftp](https://hashnode.com/tag/crushftp)
-   [#crushftp-cve-2025-54309-rce-zero-day-file-transfer-security-infosec-vulnerability](https://hashnode.com/tag/crushftp-cve-2025-54309-rce-zero-day-file-transfer-security-infosec-vulnerability)

## Written by

[Netomize Official Blog](https://hashnode.com/@mfmokbel)

@mfmokbel · Toronto, ON

  
[View profile](https://hashnode.com/@mfmokbel)

Defensive Cybersecurity Consultancy

We empower businesses with cutting-edge software and expert services to navigate the complexities of today's cyber landscape. Secure your network with cutting-edge software and services that ensure your safety and peace of mind!

## Responses

Markdown supported · ⌘↵ to post

No responses yet.