Exploit for the vsftpd 2.3.4 Backdoor (CVE-2011-2523)

This exploit takes advantage of a backdoor in version 2.3.4 of the vsftpd FTP service. The backdoor was maliciously introduced into the source code and allows remote command execution as root on the affected server

How it works

The backdoor is triggered by sending a username that contains the characters :) followed by any password. This causes the server to open a connection on port 6200, where an interactive shell can be obtained

Requirements:

• Python 3
• pwntools

Installation

git clone https://github.com/Lychi3/vsftpd-backdoor.git
cd vsftpd-backdoor
pip install pwntools

Usage

Run the script by providing the IP address of the vulnerable server:

python3 vsftpd_exploit.py <dirección_ip>

If the server is vulnerable, an interactive shell will be opened