vsftpd 2.3.4 - Backdoor Command Execution
Title source: llmExploitation Summary
EIP tracks 54 public exploits for CVE-2011-2523.
PoCs published by HerculesRD, Metasploit, padsalatushal, including Metasploit module exploits/unix/ftp/vsftpd_234_backdoor.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages a backdoor in vsftpd 2.3.4 by sending a specific username string to trigger a command execution vulnerability, opening a reverse shell on port 6200. It uses Telnet for both FTP interaction and shell access.
Description
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
Exploits (54)
This exploit leverages a backdoor in vsftpd 2.3.4 by sending a specific username string to trigger a command execution vulnerability, opening a reverse shell on port 6200. It uses Telnet for both FTP interaction and shell access.
This Metasploit module exploits a backdoor in VSFTPD 2.3.4, which spawns a shell on port 6200 when a specific username pattern is used. It connects to the FTP service, triggers the backdoor, and interacts with the spawned shell.
This repository contains a functional exploit for CVE-2011-2523, which targets a backdoor in vsftpd 2.3.4. The exploit sends a crafted username (`:)`) to trigger a shell on port 6200, demonstrating remote command execution.
This repository contains a functional exploit for CVE-2011-2523, a backdoor in vsftpd 2.3.4 that allows remote command execution by sending a crafted username and connecting to a shell on port 6200. The exploit uses Python's telnetlib to interact with the vulnerable FTP server.
This repository contains a functional Python exploit for CVE-2011-2523, targeting the backdoor in vsFTPd 2.3.4. The exploit triggers the backdoor by sending a crafted username and password, then connects to the spawned shell on port 6200.
This repository contains a functional Python exploit for CVE-2011-2523, targeting a backdoored version of vsFTPd 2.3.4. The exploit triggers a remote shell on port 6200 by sending a crafted username to the FTP service.
This repository contains a functional Python exploit for CVE-2011-2523, which targets a backdoor in VsFTPd 2.3.4. The exploit sends a crafted USER/PASS command to trigger the backdoor and spawns a root shell on port 6200.
This repository contains a functional exploit for CVE-2011-2523, a backdoor in vsftpd 2.3.4 that opens a shell on port 6200 when the username ends with ':)'. The exploit establishes an FTP connection, triggers the backdoor, and provides an interactive shell.
This repository contains a functional Python exploit for CVE-2011-2523, a backdoor in vsFTPd 2.3.4 that allows remote root access. The exploit triggers the backdoor via FTP authentication, then uses a telnet connection to inject SSH keys and enable root login.
This repository contains a functional Python exploit for CVE-2011-2523, a backdoor in vsFTPd 2.3.4. The exploit triggers the backdoor by sending a specific username and password, then connects to the spawned shell on port 6200.
This repository contains a FreePascal implementation of an exploit for CVE-2011-2523, which is a backdoor in vsFTPD 2.3.4. The exploit involves sending a username with ':)' to trigger a backdoor on port 6200, granting root access.
This repository contains a functional Python exploit for CVE-2011-2523, which targets a backdoor in vsftpd 2.3.4. The exploit sends a crafted username containing ':)' to trigger a shell on port 6200, allowing remote command execution as root.
This repository contains a functional exploit for CVE-2011-2523, a backdoor in vsftpd 2.3.4. The exploit triggers the backdoor by sending a crafted USER command with ':)' and then connects to port 6200 to execute commands.
This repository provides a detailed technical writeup on the exploitation of CVE-2011-2523, a backdoor in vsftpd 2.3.4 that opens a command shell on port 6200 when a username ending in ':)' is received. It includes exploitation steps using Metasploit and demonstrates root shell access.
This repository contains a detailed technical writeup and manual exploit code for CVE-2011-2523, a backdoor in vsftpd 2.3.4 that grants root access via a bind shell on port 6200 when a username containing ':)' is used.
This repository contains a functional Python exploit for CVE-2011-2523, which triggers a backdoor in vsftpd 2.3.4 by sending a username containing ':)' to spawn a root shell on TCP/6200. The exploit includes verification of the target banner, triggering the backdoor, and an interactive shell session.
This repository contains a detailed technical report and README documenting the exploitation of CVE-2011-2523 (vsftpd 2.3.4 backdoor) in a controlled lab environment. It includes step-by-step exploitation steps, reconnaissance findings, and remediation recommendations.
This repository provides a detailed technical analysis of CVE-2011-2523, a backdoor in a compromised version of vsftpd 2.3.4. It includes vulnerability details, attack mechanisms, remediation steps, and incident response workflows, but does not contain functional exploit code.
This repository provides a detailed technical analysis of CVE-2011-2523, a backdoor in a compromised version of vsftpd 2.3.4. It includes vulnerability details, attack mechanisms, remediation steps, and incident response workflows.
This repository provides a detailed technical writeup on CVE-2011-2523, a backdoor in vsftpd 2.3.4, including exploitation steps, Metasploit commands, and post-exploitation verification. It does not contain functional exploit code but offers comprehensive documentation and screenshots.
This repository contains a detailed DFIR investigation report and detection engineering artifacts for a simulated intrusion involving CVE-2011-2523, a backdoor in vsftpd 2.3.4. It includes a comprehensive analysis of the exploit, attacker activity, and detection rules but does not contain functional exploit code.
This repository contains a functional exploit for CVE-2011-2523, which targets a backdoor in VsFTPd 2.3.4. The exploit sends a crafted USER and PASS command to trigger the backdoor, then connects to port 6200 to obtain a root shell.
This repository provides a detailed technical writeup and lab setup for demonstrating Snort IDS/IPS capabilities against CVE-2011-2523 (vsftpd 2.3.4 backdoor). It includes custom Snort rules, attack simulation scripts, and a comparison of IDS vs. IPS modes.
This repository contains a detailed penetration test report for Metasploitable 2, including findings for CVE-2011-2523 (vsftpd 2.3.4 backdoor). It provides technical details, methodology, and evidence of exploitation but does not include functional exploit code.
This repository provides a detailed technical analysis of CVE-2011-2523, a backdoor vulnerability in vsftpd 2.3.4. It includes steps for exploitation, traffic analysis, and defensive measures, with evidence from tools like Nmap and Wireshark.
This repository contains a functional exploit for CVE-2011-2523, targeting vsftpd 2.3.4. It demonstrates a complete attack chain, including exploitation via a backdoor triggered by a specific username string, leading to a root shell.
This repository is a detailed technical writeup documenting the exploitation of CVE-2011-2523 (vsftpd 2.3.4 backdoor) on Metasploitable2, including network isolation, reconnaissance, and exploitation phases. It provides in-depth analysis of the vulnerability, attack workflow, and defensive implications.
This repository provides a detailed technical walkthrough of exploiting CVE-2011-2523, a backdoor in vsFTPd 2.3.4, including reconnaissance, exploitation steps, and post-exploitation analysis. It demonstrates the vulnerability mechanics and impact but does not include functional exploit code.
This repository contains a functional Python exploit for CVE-2011-2523, which targets a backdoor in vsFTPd 2.3.4. The exploit triggers the backdoor by sending a crafted username and connects to a hidden shell on port 6200.
This repository provides a detailed walkthrough of exploiting CVE-2011-2523, a backdoor in vsFTPd, including steps for reconnaissance, enumeration, vulnerability scanning, and exploitation using Netcat. It includes technical details and commands but does not contain functional exploit code.
This repository contains a functional Python exploit for CVE-2011-2523, a backdoor in vsftpd 2.3.4. The exploit sends a malicious USER command to trigger the backdoor, then connects to the opened port 6200 to obtain a root shell.
This repository documents a penetration testing lab targeting CVE-2011-2523, a backdoor in vsFTPd 2.3.4. It includes methodology, exploitation steps using Metasploit, and mitigation strategies, but lacks actual exploit code.
This repository appears to be a writeup or lab documentation for exploiting CVE-2011-2523, a backdoor vulnerability in vsftpd 2.3.4. The README describes a lab exercise involving the exploitation of this vulnerability on Metasploitable 2 and post-exploitation steps.
This repository contains a functional exploit for CVE-2011-2523, a backdoor in vsftpd 2.3.4 that allows remote command execution as root. The exploit triggers the backdoor by sending a username containing ':)' to the FTP service, which opens a root shell on port 6200.
This repository documents a penetration test against Metasploitable 2, focusing on the exploitation of CVE-2011-2523 in vsftpd 2.3.4. It includes detailed steps for reconnaissance, exploitation using Metasploit, and post-exploitation activities like credential recovery.
This repository contains a detailed VAPT report for Metasploitable 2, focusing on the exploitation of CVE-2011-2523 (vsftpd 2.3.4 backdoor) to achieve unauthenticated remote root access. It includes post-exploitation steps, persistence mechanisms, and remediation strategies.
This repository contains a functional exploit script for CVE-2011-2523, which targets a backdoor in vsftpd 2.3.4. The script automates the detection of the vulnerable version and triggers the backdoor to establish a reverse shell on port 6200.
This repository provides a detailed technical walkthrough of exploiting the vsFTPd 2.3.4 backdoor vulnerability (CVE-2011-2523), including reconnaissance, exploitation steps, and mitigation strategies. It documents the use of Metasploit and manual techniques to achieve remote command execution.
The repository contains a functional Python exploit for CVE-2011-2523, a backdoor in vsftpd 2.3.4, which triggers a reverse shell on port 6200. It includes both a modified PoC and a manual exploitation guide using Metasploit.
This Python script exploits CVE-2011-2523, a backdoor in vsftpd 2.3.4, by sending a crafted username and password to trigger a reverse shell. It establishes a connection to the target FTP server and executes a base64-encoded payload to spawn a bash shell.
This repository provides a laboratory guide for exploiting CVE-2011-2523, a backdoor vulnerability in vsftpd 2.3.4. It includes instructions for identifying the vulnerability, selecting an exploit, and validating its effectiveness, but does not contain actual exploit code.
This repository contains a functional exploit for CVE-2011-2523, a backdoor in vsFTPd 2.3.4. The exploit sends a crafted username and password to trigger the backdoor, which opens a shell on port 6200 for remote command execution.
This repository contains a functional exploit for CVE-2011-2523, a backdoor in vsftpd 2.3.4 that allows remote command execution as root. The exploit sends a maliciously crafted username (containing ':)') to trigger the backdoor, which opens a shell on port 6200.
The repository contains a ransomware-style message demanding Bitcoin payment for decryption, with no actual exploit code or technical details related to CVE-2011-2523. This is a deceptive attempt to extort users.
The repository contains no exploit code or technical details, only a link to a TryHackMe room and a video. This appears to be a social engineering lure rather than a legitimate PoC.
This repository contains a functional Python exploit for CVE-2011-2523, targeting vsftpd 2.3.4. The exploit leverages a backdoor in the FTP server to establish a reverse shell on port 6200, allowing remote command execution.
This repository contains a functional exploit for CVE-2011-2523, targeting the vsFTPd 2.3.4 backdoor. The exploit triggers a reverse shell by sending a crafted username with a smiley emoticon ':)' during authentication, then connects to the backdoor on port 6200.
This repository contains a functional Python exploit for CVE-2011-2523, targeting a backdoor in VSFTPd 2.3.4. The exploit triggers the backdoor via crafted USER/PASS commands and establishes a reverse shell on port 6200.
This repository provides a detailed walkthrough of exploiting CVE-2011-2523, a backdoor in vsftpd 2.3.4, to gain root access and exfiltrate sensitive files. It includes step-by-step instructions for setting up the environment, exploiting the vulnerability, and cracking passwords.
This repository contains a functional Python exploit for CVE-2011-2523, targeting the VSFTPD 2.3.4 backdoor. The exploit sends a crafted username and password to trigger the backdoor, which opens a shell on port 6200.
This repository contains a functional Python exploit for CVE-2011-2523, targeting the VSFTPD 2.3.4 backdoor. The exploit uses socket and telnetlib to trigger the backdoor and spawn a root shell on port 6200.
This repository contains a functional exploit for CVE-2011-2523, a backdoor in vsftpd 2.3.4 that listens on port 6200 for command execution. The exploit uses Telnet to authenticate and then connects to the backdoor port for an interactive shell.
This Python exploit targets CVE-2011-2523, a backdoor in vsftpd 2.3.4 that opens a shell on port 6200 when a specific username is used. The exploit establishes a Telnet connection to the backdoor shell after authenticating with the crafted credentials.
This Metasploit module exploits a backdoor in VSFTPD v2.3.4, which spawns a shell on port 6200 when a specific username pattern is used. It connects to the FTP service, triggers the backdoor, and establishes a command execution session.
Nuclei Templates (1)
product:"vsftpd"
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H