cve-2015-3306

cve-2015-3306 imagen docker hackarada/cve-2015-3306 Destinado para uso personal root@kitploit: docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...

CVE-2011-2523

CVE-2011-2523 Estos son apuntes para la creación de la metodología de ataque en un entorno controlado. Se parte de la premisa que el ejercicio es en caja negra por ende desconozco información del sistema victima 1- descargar ISO necesarios tanto metaexplotable2 como kali o cualquier otra 2-...

OpenVAS-Vulnerability-Analysis-Incident-Response-Report

OpenVAS-Vulnerability-Analysis-Incident-Response-Report Real-World Simulation: FTP Service Exploitation ProFTPD CVE-2015-3306 Real-World Simulation: FTP Service Exploitation ProFTPD CVE-2015-3306 📌 Overview This project demonstrates a full-cycle vulnerability assessment and incident response...

vsftpd-backdoor

Exploit for the vsftpd 2.3.4 Backdoor CVE-2011-2523 This exploit takes advantage of a backdoor in version 2.3.4 of the vsftpd FTP service. The backdoor was maliciously introduced into the source code and allows remote command execution as root on the affected server How it works The backdoor is...

FTP-vsFTPD-CVE-2011-2523-VAPT-Report

vsFTPD CVE-2011-2523 VAPT REPORT Target: Metasploitable 2 Tester: Security Analyst Date: 24th June 2026 Scope: Internal Lab Testing Kali Linux → Metasploitable 2 📌Executive Summary A vulnerability scanning was performed using Nmap vulnerability scanning script against the Metasploitable 2 machine...

CVE-2026-88044 rclone: RC per-server auth-proxy bypass

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC interface accepts per-server proxyOpt.AuthProxy settings, and the FTP and S3 constructors in cmd/serve/ftp/ftp.go and cmd/serve/s3/server.go...

Offensive-lab-2

Laboratorio de seguridad ofensiva : ProFTPD 1.3.3c Backdoor Exploit Flag de Root 1. Introducción y Objetivos Este informe detalla la prueba de penetración realizada en una máquina virtual VM Linux vulnerable, centrándose en identificar una vulnerabilidad de servicio de alto riesgo que permitía...

ethical-hacking-CVE-2011-2523

Hacking Ético | Evaluación 1 Pruebas Prácticas de Vulnerabilidad - CVE-2011-2523 Backdoor de vsftpd 2.3.4 Módulo: - Hacking Ético Universidad: London Metropolitan University Programa: BSc Hons en Seguridad Cibernética y Ciencias Forenses Aviso Legal Todas las actividades se llevaron a cabo en un...

LAB1-metasploitable

LAB1-metasploitable Exploitation des vulnérabilités sur la version vsftpd 2.3.4 du service ftp CVE-2011-2523 Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution Date: 9-04-2021 Exploit Author: HerculesRD Software Link: http://www.linuxfromscratch.org/thomasp/blfs-book-xsl/server/vsftpd.html...

vsftpd-234-vuln-report

💥 Informe de Explotación del Backdoor en vsftpd 2.3.4 Explotación de una vulnerabilidad conocida en vsftpd 2.3.4 usando Metasploit. 📌 Detalles del Objetivo IP del Objetivo: 192.168.150.133 Servicio: FTP Versión Vulnerable: vsftpd 2.3.4 Módulo de Exploit: exploit/unix/ftp/vsftpd234backdoor Payload...

CVE-2019-12181

CVE-2019-12181 Exploit de LPE para CVE-2019-12181 Serv-U FTP 15.1.6...

metasploitable2-vsftpd-exploitation

Metasploitable 2 - Laboratorio de Explotación de vsFTPd 2.3.4 Resumen Este proyecto demuestra un flujo de trabajo de pruebas de penetración contra una máquina deliberadamente vulnerable, Metasploitable 2. El objetivo fue identificar, explotar y analizar una vulnerabilidad conocida en el servicio...

CVE-2025-47812

🚀 Wing FTP Exploit - CVE-2025-47812 Exploit mejorado para Wing FTP Server CVE-2025-47812 - Unauthenticated Remote Code Execution RCE 🔧 Instalación Clona este repositorio y entra en el directorio: root@kitploit: git clone https://github.com/0xjuarez/CVE-2025-47812.git cd CVE-2025-47812 pip install...

EUVD-2026-64745

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2026-78251 DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

PT-2026-79833

Name of the Vulnerable Software and Affected Versions DJI Neo versions prior to 01.00.0400 DJI Neo 2 versions prior to 01.00.0500 DJI Flip versions prior to 01.00.1200 DJI Air 3 versions prior to 01.00.1600 DJI Air 3S versions prior to 01.00.1400 DJI Avata 2 versions prior to 01.00.0400 DJI Avata...

Vulnerabilities in Microsoft Windows

Microsoft has fixed a very large number of vulnerabilities in Windows. A malicious actor could exploit these vulnerabilities to carry out attacks that could result in the types of damage listed in the table below. The most serious vulnerabilities have the following identifiers: CVE-2026-49172,...

CVE-2026-49172

The CVE-2026-49172 entry describes a heap-based buffer overflow in Windows FTP Service that allows an unauthenticated, network-based attacker to execute code remotely. Documents confirm the vulnerability exists in Windows FTP Service and enables remote code execution with network access and no re...