649 matches found
OpenVAS-Vulnerability-Assessment-Incident-Response
Operation SecureScan — OpenVAS Vulnerability Assessment & Incident Response Project Overview This project demonstrates a complete Vulnerability Assessment and Incident Response workflow using OpenVAS Greenbone Vulnerability Manager in a controlled cybersecurity lab environment. The assessment...
Vulnerability-Assessment-Exploitation-Lab
Vulnerability-Assessment-Exploitation-Lab Metasploitable 2 Penetration Testing Lab Executive Summary This project documents a successful, full-lifecycle penetration test against the Metasploitable 2 Linux environment. The assessment follows the Penetration Testing Execution Standard PTES , coveri...
explotacion-vsftpd-nmap_Laboratorio_1
🔐 Security Lab - Unit 1 📝 Lab Statement Name: Exploitation of vulnerable services Objective: Identify, analyze, and exploit a vulnerable service in a controlled lab environment using reconnaissance and exploitation tools. Instructions: 1. Identify a vulnerable service on a target machine. 2...
CVE-2007-5962
CVE-2007-5962 1. Introduction My tool is written in Python and exploits the CVE-2007-5962 vulnerability to perform a series of directory changes that crash the ftp daemon. DISCLAIMER!!! Please note that the use of hacking tools without authorization is illegal and could result in legal problems...
CVE-2011-2523
Vsftpd 2.3.4 Backdoor Vulnerability Vulnerability When a hacker inputs a string containing : in the USER parameter, a backdoor opens on port 6200...
CVE-2011-2523
CVE-2011-2523 Exploit for vsFTPd backdoor vulnerabilty written in python using Pwntools Usage pip3 install pwntools python3 ./CVE-2011-2523.py optional...
ethical-hacking-CVE-2011-2523
Ethical Hacking | Assessment 1 Practical Vulnerability Testing - CVE-2011-2523 vsftpd 2.3.4 Backdoor Module: - Ethical Hacking University: London Metropolitan University Programme: BSc Hons Cyber Security and Forensic Science Legal Disclaimer All activities were conducted in a controlled, isolate...
PwnTillDawn-Portal-Walkthrough
🔐 Vulnerability Assessment & Penetration Testing VAPT 📌 Project: Target Exploitation Walkthrough ⚠️ This project is for educational and authorized testing purposes only. Unauthorized access to systems is strictly prohibited. 👨💻 Author SYAFIQ Role: Lead Penetration Tester 🎯 Target Information...
CVE-2011-2523
vsftpd 2.3.4 Backdoor Exploit FTP Server: vsftpd Vulnerable version: 2.3.4 CVE: CVE-2011-2523 Vulnerability: Backdoor on port 6200 opened when user entered strings appending : in ftp USER param Notes: The RCE doesn't need to be authenticated...
CVE-2011-2523
CVE-2011-2523 usage: CVE-2011-2523.py -h -v RHOST RPORT vsFTPd 2.3.4 CVE-2011-2523 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-2523 positional arguments: RHOST target address RPORT target port optional arguments: -h, --help show this help message and exit -v, --version show program'...
OffensivePascal-CVE-2011-2523
CVE-2011-2523 FreePascal implementation of CVE-2011-2523 Vulnerability vsFTPD 2.3.4 Using : in the username opens a backdoor as root on port 6200 on the target Requirements Synapse. If you don't have it, install through the OPM...
vsftpd-234-backdoor
vsftpd 2.3.4 Backdoor Exploit A small, dependency-free Python 3 exploit for the vsftpd 2.3.4 backdoor CVE-2011-2523. It triggers the backdoor over FTP and drops you into an interactive root shell on the spawned listener. Written as a modern replacement for old exploit scripts which depended on...
vsftpd-cve-2011-2523-detection-signature
Detection Engineering & Vulnerability Research - CVE-2011-2523 vsftpd 2.3.4 A CVE to Detection Signature Engineering Project: researching a disclosed vulnerability, building a fingerprint that identifies it externally, and validating detection quality against real lab targets. !Vulnerability...
metasploitable-pentest-report
Metasploitable 2 — Penetration Test Report Disclaimer: This penetration test was conducted in a private, isolated VMware lab environment for educational purposes only. No real systems were accessed. All IP addresses have been anonymised. Overview Field| Details ---|--- Tester| Prafullya Shandilya...
vsftpd-cve-2011-2523-lab
Exploitation of VSFTPD 2.3.4 Backdoor CVE-2011-2523 A hands-on penetration testing lab demonstrating the identification and exploitation of the VSFTPD 2.3.4 backdoor CVE-2011-2523 on the intentionally vulnerable Metasploitable2 virtual machine using the Metasploit Framework. Disclaimer This proje...
CVE-2011-2523
CVE-2011-2523 These are notes for creating the attack methodology in a controlled environment. It is assumed that the exercise is black-box, so I have no knowledge of the victim system. 1. Download the necessary ISOs, both Metasploitable2 and Kali or any other. 2. Important: the environment is...
mtechweek_04
mtechweek04 Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC CVE-2004-2687, privilege escalation via udev netlink CVE-2009-1185, and vsftpd 2.3.4 backdoor analysis CVE-2011-2523, with firewall mitigation validated end-to-end. This repository...
metasploit-lab-report
Metasploit Penetration Testing Lab Report 📋 Overview This repository contains a comprehensive penetration testing lab report demonstrating exploitation of known vulnerabilities in Metasploitable 2 using the Metasploit Framework. This is an educational resource documenting proper penetration testi...
CVE-2011-2523
CVE-2011-2523 — vsftpd 2.3.4 Backdoor Exploit Overview vsftpd Very Secure FTP Daemon is an FTP server for Unix-like platforms including Linux, distributed under the GNU General Public License. In July 2011, it was discovered that vsftpd version 2.3.4 — available for download between June 30 and...