CVE-2011-2523 PoC — vsftpd 操作系统命令注入漏洞

Source

Associated Vulnerability

Description

An exploit to get root in vsftpd 2.3.4 (CVE-2011-2523) written in python

Readme

# vsftpd2.3.4PyExploit
An exploit to get root in vsftpd 2.3.4 (CVE-2011-2523) written in python

Usage:
	./exploit.py ${Victim_IP_address}

Attention! The exploit open a shell that it is not reverse. I recommend to open a reverse shell after the exploit. I didnt do it here because i didnt want to assume what kind of tools and permissions we have at victim's host

You can find it also at: https://www.exploit-db.com/exploits/49757

File Snapshot

 [4.0K]  /data/pocs/1d826b32fc036ef2a001971ffff7a41a885ea3ea
├── [ 432]  README.md
└── [ 966]  vsftpd234exploit.py

0 directories, 2 files

Remarks