sonalisarkar-2003

GitHub · Repository owner · Source ID 296212403
Source profile

Source-scoped identity with 1 associated PoC and 1 linked vulnerability.

Showing 1 PoC on this page

GitHub

sonalisarkar-2003/FTP-vsFTPD-CVE-2011-2523-VAPT-Report

Repository PoC0Created 2026-08-13WriteupCVE-2011-25231 file

3.9 KiB

GitHubPoC details
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

A VAPT report documenting the scanning and exploitation of CVE-2011-2523 (vsFTPd 2.3.4 backdoor) on a Metasploitable 2 target using Nmap and Metasploit. The artifact contains no exploit or scanner code; it is a narrative report with embedded screenshots.

Backdoor review

No backdoor observed in reviewed code

The artifact is a payload withheld-only VAPT report describing the exploitation of CVE-2011-2523 against a Metasploitable 2 target. It contains no executable code, no instructions for the operator to run local commands, and no concealed or deceptive behavior. The report describes standard use of Nmap and Metasploit against a lab target.

ClassificationWriteup
Model confidence95%
AuthenticationNot required
Languagesmarkdown
Target softwarevsftpd
Attack typesbackdoorcommand execution
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact is a VAPT report in README.md that describes scanning and exploitation steps but contains no executable code, scripts, or configuration files. It is a technical writeup of a known vulnerability.

README.md:1-123

Requirements

  • Target running vsFTPd 2.3.4 with the backdoorREADME.md:56-60
  • Network access to target port 21 and port 6200README.md:60

Observed behavior

  • Describes using Nmap vuln script to detect the vulnerabilityREADME.md:84-88
  • Describes using Metasploit to exploit the backdoor and obtain a root Meterpreter sessionREADME.md:90-102
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Artifact Type
Payload withheldThe artifact is a single README.md file containing a Vulnerability Assessment and Penetration Testing (VAPT) report. It describes steps taken by a security analyst but contains no source code, scripts, or executable payloads.README.md:1-123
Exploit Target
Payload withheldThe report describes exploiting a known backdoor in vsFTPd 2.3.4 on a Metasploitable 2 virtual machine. This is the disclosed target of the exploit, not the operator's machine.README.md:3README.md:47
Exploit Tool
Payload withheldThe report states that the vulnerability was exploited using the Metasploit Framework, a standard penetration testing tool. The operator is expected to configure and run this tool themselves.README.md:15README.md:90
Review boundaries

What the analysis did not establish

  • Evidence consists of a single Markdown report with embedded image links; no exploit or scanner source code is present.
  • Screenshots referenced in the report are not included in the evidence packet.
  • The report references external image URLs for evidence screenshots, but these are not included in the review packet and their content cannot be verified.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.