carlosrpastrana/cve-2011-2553Bash exploit for CVE-2011-2553 enabling remote code execution and privilege escalation on vulnerable FTP services via a special character in the USER field.
Notice: This repository contains educational material for testing in a controlled laboratory. Do not use the files or techniques described here against systems that are not your own or that do not have explicit authorization. The goal is learning and strengthening security.
Bash exploit for vulnerability CVE-2011-2553 in FTP services that allows remote code execution and privilege escalation.
bash (v4.0+)netcat (nc)git clone https://github.com/carlosrpastrana/cve-2011-2553.git
cd cve-2011-2553-exploit
chmod +x escalaprivile.sh
Basic usage:
./exploit.sh <VICTIM_IP>
Advanced usage:
./exploit.sh <VICTIM_IP> <FTP_PORT> <BACKDOOR_PORT>
Examples:
Usage with default values (FTP: 21, Backdoor: 5000)
./exploit.sh 172.17.0.2
Specifying custom ports
./exploit.sh 192.168.1.100 21 4444
In CTF environment
./exploit.sh 10.10.10.5 21 1337
Reconnaissance: Checks dependencies and connectivity
Exploitation: Sends malicious payload to the FTP service
Backdoor: Automatically connects to the remote shell
Access: Provides interactive system access
FTP services that have not applied patches for CVE-2011-2553
Specific FTP implementations vulnerable to the special character ☺
The exploit uses the Unicode character \u263A (☺) to trigger the vulnerability
The backdoor usually opens on a high port (5000 by default)
Requires the FTP service to be running with elevated privileges
For educational use only and in controlled environments. Using this exploit on systems without explicit authorization is illegal and constitutes a crime. (If I have to repeat it twice, I will)
The author is not responsible for the misuse of this tool. Use it only in test environments, CTF labs, or your own systems with explicit permission.
This project is licensed under the MIT License - see the LICENSE file for details.