johanmv/explotacion-vsftpd-nmap_laboratorio_1
Laboratorio técnico de ciberseguridad donde se realiza reconocimiento de red con Nmap y explotación de la vulnerabilidad CVE-2011-2523 (vsftpd 2.3.4) mediante Metasploit Framework. Proyecto académico orientado a demostrar habilidades en análisis de vulnerabilidades, uso de herramientas de pentesting y reporte técnico.
Name: Exploitation of vulnerable services
Objective: Identify, analyze, and exploit a vulnerable service in a controlled lab environment using reconnaissance and exploitation tools.Instructions:
- Identify a vulnerable service on a target machine.
- Determine the nature of the vulnerability and consult references such as:
- CVE-2011-2523
- OSVDB-73573
- https://www.exploit-db.com
- https://www.rapid7.com/db/modules/exploit/unix/ftp/vsftpd_234_backdoor
- Select a suitable exploit and validate its effectiveness.
- Run the exploit by providing the IP address and port of the vulnerable service.
- Monitor the generated traffic and validate the privileges obtained.
- Generate evidence of the exploitation performed (screenshots, command outputs, etc.).
