CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit

This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd site in 2011.

🧠 Vulnerability Overview

• The compromised binary listens on port 6200 after receiving a specially crafted username.
• Triggering the backdoor spawns a remote shell with root privileges.
• The exploit is only effective against the backdoored binary, not against legitimate versions of vsFTPd.

⚙️ Requirements

Ensure the following dependencies are installed:

sudo apt update
sudo apt install python3

📦 Installation

git clone https://github.com/BolivarJ/CVE-2011-2523.git
cd CVE-2011-2523
chmod +x exploit.py

🚀 Usage

python3 exploit.py <TARGET_IP>

📚 References

• CVE-2011-2523
• Original vsFTP advisory