CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 Exploit Description vsftpd, which stands for Very Secure FTP Daemon,is an FTP server for Unix-like systems, including Linux. It is licensed under the GNU General Public License. It supports IPv6 and SSL. In July 2011, it was discovered that vsftpd version 2.3.4...

CVE-2011-2523

CVE-2011-2523 usage: CVE-2011-2523.py -h -v RHOST RPORT vsFTPd 2.3.4 CVE-2011-2523 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-2523 positional arguments: RHOST target address RPORT target port optional arguments: -h, --help show this help message and exit -v, --version show program'...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 Backdoor Exploit This is a Python-based exploit script for the infamous backdoor found in vsftpd version 2.3.4. When triggered, it opens a shell on port 6200 — granting remote command execution as the root user in some vulnerable setups. About the Vulnerability vsftpd...

CVE-2011-2523

Vsftpd 2.3.4 Backdoor Vulnerability Vulnerability When a hacker inputs a string containing : in the USER parameter, a backdoor opens on port 6200...

CVE-2007-5962

CVE-2007-5962 1. Introduction My tool is written in Python and exploits the CVE-2007-5962 vulnerability to perform a series of directory changes that crash the ftp daemon. DISCLAIMER!!! Please note that the use of hacking tools without authorization is illegal and could result in legal problems...

CVE-2011-2523

CVE-2011-2523 Exploit for vsFTPd backdoor vulnerabilty written in python using Pwntools Usage pip3 install pwntools python3 ./CVE-2011-2523.py optional...

OffensivePascal-CVE-2011-2523

CVE-2011-2523 FreePascal implementation of CVE-2011-2523 Vulnerability vsFTPD 2.3.4 Using : in the username opens a backdoor as root on port 6200 on the target Requirements Synapse. If you don't have it, install through the OPM...

vsftpd-234-backdoor

vsftpd 2.3.4 Backdoor Exploit A small, dependency-free Python 3 exploit for the vsftpd 2.3.4 backdoor CVE-2011-2523. It triggers the backdoor over FTP and drops you into an interactive root shell on the spawned listener. Written as a modern replacement for old exploit scripts which depended on...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 Exploit Description Very Secure FTP Daemon vsftpd is an FTP server for Unix-like platforms, including Linux. It is distributed under the terms of the GNU General Public Licence. It supports IPv6 as well as SSL. It was revealed in July 2011 that vsftpd version 2.3.4,...

vsftpd-cve-2011-2523-detection-signature

Detection Engineering & Vulnerability Research - CVE-2011-2523 vsftpd 2.3.4 A CVE to Detection Signature Engineering Project: researching a disclosed vulnerability, building a fingerprint that identifies it externally, and validating detection quality against real lab targets. !Vulnerability...

CVE-2011-2523

CVE-2011-2523 These are notes for creating the attack methodology in a controlled environment. It is assumed that the exercise is black-box, so I have no knowledge of the victim system. 1. Download the necessary ISOs, both Metasploitable2 and Kali or any other. 2. Important: the environment is...

metasploitable-pentest-report

Metasploitable 2 — Penetration Test Report Disclaimer: This penetration test was conducted in a private, isolated VMware lab environment for educational purposes only. No real systems were accessed. All IP addresses have been anonymised. Overview Field| Details ---|--- Tester| Prafullya Shandilya...

CVE-2011-2523

vsftpd 2.3.4 Backdoor Exploit FTP Server: vsftpd Vulnerable version: 2.3.4 CVE: CVE-2011-2523 Vulnerability: Backdoor on port 6200 opened when user entered strings appending : in ftp USER param Notes: The RCE doesn't need to be authenticated...

vsftpd-cve-2011-2523-lab

Exploitation of VSFTPD 2.3.4 Backdoor CVE-2011-2523 A hands-on penetration testing lab demonstrating the identification and exploitation of the VSFTPD 2.3.4 backdoor CVE-2011-2523 on the intentionally vulnerable Metasploitable2 virtual machine using the Metasploit Framework. Disclaimer This proje...

mtechweek_04

mtechweek04 Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC CVE-2004-2687, privilege escalation via udev netlink CVE-2009-1185, and vsftpd 2.3.4 backdoor analysis CVE-2011-2523, with firewall mitigation validated end-to-end. This repository...

metasploit-lab-report

Metasploit Penetration Testing Lab Report 📋 Overview This repository contains a comprehensive penetration testing lab report demonstrating exploitation of known vulnerabilities in Metasploitable 2 using the Metasploit Framework. This is an educational resource documenting proper penetration testi...

CVE-2011-2523

CVE-2011-2523 — vsftpd 2.3.4 Backdoor Exploit Overview vsftpd Very Secure FTP Daemon is an FTP server for Unix-like platforms including Linux, distributed under the GNU General Public License. In July 2011, it was discovered that vsftpd version 2.3.4 — available for download between June 30 and...

CVE-2011-2523-vsFTPd-2.3.4-Writeup

" CVE-2011-2523-vsFTPd-2.3.4-Writeup"...

CVE-2011-2523

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd si...

CVE-2011-2523-poc

CVE-2011-2523-poc Este es un script de python3 para explotar el CVE-2011-2523, la Ejecución de Comandos por Backdoor en VSFTPD 2.3.4, usando los módulos socket y telnetlib. Requisitos sudo python3 -m pip install pwntools Instalación git clone https://github.com/4m3rr0r/CVE-2011-2523-poc.git cd...