CVE-2011-2523 PoC — vsftpd 操作系统命令注入漏洞

Source

Associated Vulnerability

Description

A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability (CVE-2011-2523) present in vsFTP 2.3.4

Readme

# vsFTP 2.3.4 Remote Root Shell Exploit
A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a [Vulnerability (CVE-2011-2523)](https://nvd.nist.gov/vuln/detail/CVE-2011-2523) present in vsFTP 2.3.4
## Requirements
Language Used = Python3<br />
Modules/Packages used:
* socket
* os
* pexpect
* paramiko
* getpass
* datetime
* optparse
* colorama
* multiprocessing
* time
<!-- -->
Install the dependencies:
```bash
pip install -r requirements.txt
```
## Result
After Successful Exploitation, we can directly ssh to the target device as root user.

File Snapshot

 [4.0K]  /data/pocs/f7b4d6cad11ebbd8c2eb87c03b6ba6b2833967f6
├── [8.8K]  main.py
├── [ 585]  README.md
└── [   8]  requirements.txt

0 directories, 3 files

Remarks