CVE-2011-2523

Vsftpd 2.3.4 Backdoor Vulnerability Vulnerability When a hacker inputs a string containing : in the USER parameter, a backdoor opens on port 6200...

CVE-2011-2523

CVE-2011-2523 These are notes for creating the attack methodology in a controlled environment. It is assumed that the exercise is black-box, so I have no knowledge of the victim system. 1. Download the necessary ISOs, both Metasploitable2 and Kali or any other. 2. Important: the environment is...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 Backdoor Exploit This is a Python-based exploit script for the infamous backdoor found in vsftpd version 2.3.4. When triggered, it opens a shell on port 6200 — granting remote command execution as the root user in some vulnerable setups. About the Vulnerability vsftpd...

CVE-2011-2523

CVE-2011-2523 root@kitploit: usage: CVE-2011-2523.py -h -v RHOST RPORT vsFTPd 2.3.4 CVE-2011-2523 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-2523 positional arguments: RHOST target address RPORT target port optional arguments: -h, --help show this help message and exit -v, --versio...

CVE-2007-5962

CVE-2007-5962 1. Introduction My tool is written in Python and exploits the CVE-2007-5962 vulnerability to perform a series of directory changes that crash the ftp daemon. root@kitploit: DISCLAIMER!!! Please note that the use of hacking tools without authorization is illegal and could result in...

CVE-2011-2523-vsFTPd-2.3.4-Writeup

" CVE-2011-2523-vsFTPd-2.3.4-Writeup"...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 Exploit Description vsftpd, which stands for Very Secure FTP Daemon,is an FTP server for Unix-like systems, including Linux. It is licensed under the GNU General Public License. It supports IPv6 and SSL. In July 2011, it was discovered that vsftpd version 2.3.4...

vsftpd-234-backdoor

vsftpd 2.3.4 Backdoor Exploit A small, dependency-free Python 3 exploit for the vsftpd 2.3.4 backdoor CVE-2011-2523. It triggers the backdoor over FTP and drops you into an interactive root shell on the spawned listener. Written as a modern replacement for old exploit scripts which depended on...

SmileySploit

SmileySploit A basic script that exploits CVE-2011-2523 Overview In 2011, an integrated backdoor was found on vsFTPd servers running version 2.3.4, in which using a smiley emoticon ":" triggers a reverse connection to an attacker. With this, it is extremely easy to create an exploit script and ga...

vsftpd-cve-2011-2523-detection-signature

Detection Engineering & Vulnerability Research - CVE-2011-2523 vsftpd 2.3.4 A CVE to Detection Signature Engineering Project: researching a disclosed vulnerability, building a fingerprint that identifies it externally, and validating detection quality against real lab targets. !Vulnerability...

CVE-2011-2523

CVE-2011-2523 使用 Pwntools 以 Python 编写的 vsFTPd 后门漏洞利用程序 用法 root@kitploit: pip3 install pwntools python3 ./CVE-2011-2523.py optional...

metasploitable-pentest-report

Metasploitable 2 — 渗透测试报告 免责声明： 本次渗透测试仅在私有的、隔离的 VMware 实验室环境中进行，仅供教育目的。未访问任何真实系统。所有 IP 地址均已匿名化处理。 概述 字段| 详情 ---|--- 测试人员| Prafullya Shandilya 目标| Metasploitable 2（故意存在漏洞的虚拟机） 攻击机| Kali Linux 网络| 隔离的 VMware 仅主机模式实验室 日期| 2026年5月9日 工具| Nmap 7.95, Metasploit v6.4.94, Netcat 发现摘要 方法 root@kitploit: Pha...

vsftpd-cve-2011-2523-lab

Explotación de la puerta trasera VSFTPD 2.3.4 CVE-2011-2523 Un laboratorio práctico de pruebas de penetración que demuestra la identificación y explotación de la puerta trasera VSFTPD 2.3.4 CVE-2011-2523 en la máquina virtual intencionalmente vulnerable Metasploitable2 utilizando Metasploit...

mtechweek_04

mtechweek04 基于 Metasploit 的渗透测试，针对隔离的 Metasploitable2 实验室虚拟机 —— 通过 DistCC（CVE-2004-2687）远程利用、通过 udev netlink（CVE-2009-1185）权限提升，以及对 vsftpd 2.3.4 后门（CVE-2011-2523）的分析，并端到端验证了防火墙缓解措施。 该仓库记录了在隔离的 QEMU 实验室中针对 Metasploitable2 执行的授权渗透测试，模拟一家私有公司的服务器。本次测试遵循完整的攻击性安全方法论 —— 侦察、利用、权限提升与缓解措施验证 —— 使用 Metasplo...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 漏洞利用 描述 Very Secure FTP Daemon vsftpd 是一个适用于类 Unix 平台（包括 Linux）的 FTP 服务器。它遵循 GNU 通用公共许可证条款发布，支持 IPv6 和 SSL。 2011 年 7 月，有消息称可从主站下载的 vsftpd 2.3.4 版本已被攻陷。用户登录受篡改的 vsftpd-2.3.4 服务器，如果在用户名处输入 : 笑脸符号，即可在 6200 端口获取一个命令 Shell。这并非 vsftpd 本身的安全漏洞，而是有人上传了一个带有后门的独立篡改版本。该主站此后已迁移至...

CVE-2011-2523

vsftpd 2.3.4 Backdoor Exploit FTP Server: vsftpd Vulnerable version: 2.3.4 CVE: CVE-2011-2523 Vulnerability: Backdoor on port 6200 opened when user entered strings appending : in ftp USER param Notes: The RCE doesn't need to be authenticated...

CTF---CVE-2011-2523

Scenario Capture the Flag - CVE-2011-2523 Capture the decrypted /etc/shadow and /etc/passwd file from vulnerable Metasploitable 2 server. Setup Enviornment Step 1: Download an unzip virtual machine For this CTF, we run VMware Workstation Pro with two virtual machines. We utilize Kali Linux as the...

metasploit-lab-report

Metasploit 渗透测试实验室报告 📋 概述 本仓库包含一份全面的渗透测试实验室报告 ，演示了使用 Metasploit 框架利用 Metasploitable 2 中已知漏洞的过程。这是一份教育资源，记录了在受控实验室环境中进行正确渗透测试的方法论。 ⚠️ 免责声明 使用本内容前请阅读 仅限授权实验室测试 目标系统： Metasploitable 2（故意存在漏洞的训练虚拟机） 目的： 仅用于教育和培训目的 未经授权访问计算机系统是非法的 遵守所有适用的法律、法规和道德准则 在测试任何系统之前获得书面授权 作者对滥用或损害不承担任何责任 完整法律免责声明请参阅...

CVE-2011-2523

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd si...

CVE-2011-2523-poc

CVE-2011-2523-poc This is a python3 script to exploit the CVE-2011-2523, the VSFTPD 2.3.4 Backdoor Command Execution, using socket and telnetlib modules Requirements root@kitploit: sudo python3 -m pip install pwntools Install root@kitploit: git clone https://github.com/4m3rr0r/CVE-2011-2523-poc.g...