jun41ds2709/vsftpd-2.3.4-exploitPython exploit for the vsFTPd 2.3.4 backdoor (CVE-2011-2523).
Python Proof of Concept for the vsFTPd 2.3.4 backdoor — CVE-2011-2523
vsFTPd (Very Secure FTP Daemon) is an FTP server commonly used on Unix-like systems.
The vsFTPd 2.3.4 release distributed in 2011 was compromised with a malicious backdoor. This was not a normal vulnerability in the vsFTPd code itself; rather, the distributed source package had been modified to contain a backdoor.
When a specially crafted FTP username containing :) is processed by the compromised version, the backdoor can open a command shell on TCP port 6200.
This project is a small Python proof-of-concept demonstrating the vulnerability in an authorized lab environment.
:)The PoC first checks whether the target reports vsFTPd version 2.3.4, then sends the backdoor trigger and attempts to connect to port 6200.
Install pwntools:
python3 -m pip install pwntools
git clone https://github.com/Hellsender01/vsftpd_2.3.4_Exploit.git
cd vsftpd_2.3.4_Exploit
chmod +x exploit.py
python3 exploit.py <Target_IP>
Example:
python3 exploit.py 192.168.1.3
You can also specify a custom FTP port:
python3 exploit.py <Target_IP> <Port>
This PoC can be tested in an isolated environment such as Metasploitable 2, where the vulnerable service is commonly available.
Only use this against systems you own or have explicit permission to test.
Special thanks to Harshit the Cyber Expert for teaching me the concepts and helping me learn how to write this Python PoC.
This project is created for educational purposes, CTFs, and authorized security testing only. The author is not responsible for misuse or damage caused by this code.