CVE-2011-2523 PoC — vsftpd 操作系统命令注入漏洞

Source

https://github.com/chleba124/vsftpd-exploit

Associated Vulnerability

Title:vsftpd 操作系统命令注入漏洞 (CVE-2011-2523)
Description:vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Description

A tool that exploits the CVE-2011-2523 vulnerability.

Readme


# VSFTPD Exploit

A script that exploits the CVE-2011-2523 vulnerability in vsftpd.


## Installation



```bash
  git clone https://github.com/chleba124/vsftpd-exploit.git
  cd vsftpd-exploit
  python -m pip install -r requirements.txt
  py main.py
```
## FAQ

#### Is this safe?

Yes it is and it is open source so you can read the code.

#### How does it work?

It connects to the vsptfd ftp server and bypasses the password.

#### Can i use it on linux?

No, you can only use it on Windows.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!