CVE-2011-2523 PoC — vsftpd 操作系统命令注入漏洞

Description

A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability (CVE-2011-2523) present in vsFTP 2.3.4

介绍

# vsFTP 2.3.4 Remote Root Shell Exploit
A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a [Vulnerability (CVE-2011-2523)](https://nvd.nist.gov/vuln/detail/CVE-2011-2523) present in vsFTP 2.3.4
## Requirements
Language Used = Python3<br />
Modules/Packages used:
* socket
* os
* pexpect
* paramiko
* getpass
* datetime
* optparse
* colorama
* multiprocessing
* time
<!-- -->
Install the dependencies:
```bash
pip install -r requirements.txt
```
## Result
After Successful Exploitation, we can directly ssh to the target device as root user.

文件快照

备注