CVEs-PoC/2011/CVE-2011-2523.md

CVE-2011-2523

Description

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

POC

Reference

• http://packetstormsecurity.com/files/162145/vsftpd-2.3.4-Backdoor-Command-Execution.html
• https://packetstormsecurity.com/files/102745/VSFTPD-2.3.4-Backdoor-Command-Execution.html
• https://vigilance.fr/vulnerability/vsftpd-backdoor-in-version-2-3-4-10805

Github

• https://github.com/0xB0y426/CVE-2011-2523-PoC
• https://github.com/0xB0y426/Uno13x
• https://github.com/0xFTW/CVE-2011-2523
• https://github.com/0xSojalSec/-CVE-2011-2523
• https://github.com/0xSojalSec/CVE-2011-2523
• https://github.com/1060275195/Covid-v2-Botnet
• https://github.com/223suraj/Network-Penetration-Testing-with-Real-World-Exploits-and-Security-Remediation.
• https://github.com/4m3rr0r/CVE-2011-2523-poc
• https://github.com/5k1pp/Red-Team-Engagement-Simulation
• https://github.com/9TY-SIX/Vulnerability-Assessment-Project
• https://github.com/ANUSHRIYA123/6604780_ANUSHRIYASAHU_G3
• https://github.com/ANUSHRIYA123/fxrtdrt
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Abu-Siddiq518/VAPT-Cybersecurity-Projects-
• https://github.com/AhmedIrfan198/Penetration-Test-of-Metasploitable-2
• https://github.com/AidanBurkeCyb/Network-Vulnerability-Assessment-with-Nmap
• https://github.com/AleksandrMihajlov/SDB-13-01
• https://github.com/Alex2nder/meta
• https://github.com/AlexielArdilla/Ethical-Hacking-y-ciberdelito
• https://github.com/AlexielArdilla/La-biblia-negrisima-del-Ethical-Hacker
• https://github.com/Aman0003sarkar/Network-Penetration-Testing-with-Real-World-Exploits-and-Security-Remediation
• https://github.com/AndreevAleksandr/VandAttonInfoSys
• https://github.com/Anshusharma1239/Simulating-Real-World-Network-Exploitation-and-Defense-Anshu.pdf
• https://github.com/Anton-gen/exploite_1
• https://github.com/AnugiArrawwala/CVE-Research
• https://github.com/As9xm/BrokenDoor-CVE-2011-2523-
• https://github.com/Ashu543-sinhh/ceh-project
• https://github.com/Atiwitch15101/vsftpd-2.3.4-Exploit
• https://github.com/Avinash-05-web/CHE-project-4th-sem
• https://github.com/Bibhanshu16/Ethical-Hacking-Project-Network-Penetration-Testing
• https://github.com/Bipin3214/Network-Penetration-Testing
• https://github.com/BolivarJ/CVE-2011-2523
• https://github.com/BrennanStJohn/Sample_Pentest
• https://github.com/C4ort26/CyberSecurity-portfolio-
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CYB3RLEO/Penenetration_Testing_Lab_Exploitation_Phase1-Metasploitable-
• https://github.com/CYB3RLEO/Penetration_Test_Report_Metasploitable2
• https://github.com/CipherLucas/Metasploitable2-PenTest-Report
• https://github.com/CitrineNull/Pivot-Lab
• https://github.com/CitrineNull/Recon-101
• https://github.com/CodingChatRoom/Advance-Reconnaissance-
• https://github.com/CoolerVoid/Vision
• https://github.com/CoolerVoid/Vision2
• https://github.com/DButter/whitehat_public
• https://github.com/DaddyBigFish/vulme
• https://github.com/DeCryptMan/Nexus
• https://github.com/Dit-Developers/Metasploitable2
• https://github.com/Divakar12p/divakar-manda
• https://github.com/DmitriyPetrovskiy23/InfoSec-homework1
• https://github.com/Dom-Techblue/Relatorio_pentest
• https://github.com/Drianic/HELP-HACKSIM0
• https://github.com/EhmaanShafqat96/Vulnerability-Assessment-of-Metasploitable-using-Nmap-and-Nikto
• https://github.com/ElnurBDa/simple-vsftpd-ctf
• https://github.com/EncryptedCharles404/cybersecurity-vulnerability-assessment
• https://github.com/EvgeniyaBalanyuk/attacks
• https://github.com/Evisu77/Vulnerability-assessment
• https://github.com/Fatalitysec/vsftpd_2.3.4_Backdoor
• https://github.com/Femi3x/Vulnerability-Assessment-Report
• https://github.com/Furious992/HW13-01
• https://github.com/Gdec02/nmap-scan-metasploitable
• https://github.com/Gill-Singh-A/vsFTP-2.3.4-Remote-Root-Shell-Exploit
• https://github.com/GodZer/exploit_vsftpd_backdoor
• https://github.com/Gr4ykt/CVE-2011-2523
• https://github.com/HackDreamer/Network-Vulnerability-Scanner
• https://github.com/HariprasadG92/Metasploitable2-Penetration-Test
• https://github.com/Harsh-hub1234/Network_penetration_testing
• https://github.com/Hellsender01/vsftpd_2.3.4_Exploit
• https://github.com/HerculesRD/vsftpd2.3.4PyExploit
• https://github.com/It-iandeepak/CEH-Project
• https://github.com/ItsSamikshaVijay/Google-Cybersecurity-Professional-Portfolio-
• https://github.com/JFPineda79/Red-Team-Engagement-Simulation
• https://github.com/JJezorsk/kali-metasploitable-lab
• https://github.com/JohanMV/explotacion-vsftpd-nmap_Laboratorio_1
• https://github.com/JohanMV/vulnerability-analysis-lab
• https://github.com/Josh-Ojima/METASPLOITABLE-192.168.1.111-Target-Vulnerability-Assessment
• https://github.com/JustSouichi/vsftpd_2_3_4
• https://github.com/Justinrwiririza/CyberSec-RedBlue-Home-Lab
• https://github.com/Jyotirditya/metasploitable2-pentest
• https://github.com/KLee-2524/Metasploit-vsftpd234-Lab
• https://github.com/KarthikeyanT-27/pentesting_lab_report_basic
• https://github.com/KeithFecteau/Learning-Cyber-Attacks-Through-Practice-Lab
• https://github.com/KellyLindsayCodes/cybersecurity-portfolio
• https://github.com/KennuC/PentestLab
• https://github.com/Khalilha1/Windows_Exploitation
• https://github.com/KirthiNadesn/Penetration_Testing_Metasploitable2
• https://github.com/Kr1tz3x3/HTB-Writeups
• https://github.com/LOCK-0N/CVE-2011-2523
• https://github.com/Lab2RKSB/PraktikHack
• https://github.com/Lateefaholagoke/Vulnerability-Scanning-
• https://github.com/Lychi3/vsftpd-backdoor
• https://github.com/Lynk4/CVE-2011-2523
• https://github.com/LyticOnaope/Penetration-Testing-
• https://github.com/MFernstrom/OffensivePascal-CVE-2011-2523
• https://github.com/ManoJ9082/Vulnerability-Assessment-using-Tenable-Nessus
• https://github.com/Minakshi1030/Network-Penetration-Testing-
• https://github.com/MohamedSayed47/DEPI_Final_project
• https://github.com/MrFrozenPepe/Pentest-Cheetsheet
• https://github.com/MrScytheLULZ/covid
• https://github.com/Nellyjay74/Running-Vulnerability-Assessment-Report
• https://github.com/Neoju5t/expo-att
• https://github.com/Nikhil7787/VAPT
• https://github.com/NikolayAntipov/DB_13-01
• https://github.com/Nkemjika-123/Cybersecurity-Governance-Framework
• https://github.com/NnickSecurity/vsftpd_backdoor_exploit
• https://github.com/Nohit594/CEH_Project
• https://github.com/NoisyPlatypus/cybersecurity-portfolio
• https://github.com/NullBrunk/CVE-2011-2523
• https://github.com/NullBrunk/NullBrunk
• https://github.com/OTLAW1899/Vulnerability-Assessment-Scan-Report--On--Kali-Server-Using-Nmap
• https://github.com/OlegBondarev33/dos
• https://github.com/Pandalisaa/Vulnerability-Assessment-and-Penetration-Testing
• https://github.com/ParmatmaKumar/Ethical_hacking_project
• https://github.com/ParmeshwarSao/Project-EH
• https://github.com/Patrick122333/4240project
• https://github.com/Paulineclv/Port-Scanner
• https://github.com/Prabashana20/Penetration-Testing-Kali-vs-Metasploitable
• https://github.com/Prachi-Sharma-git/Exploit_FTP
• https://github.com/Prakanth20/Network-Scanner-with-Banner-Grabbing-and-CVE-Detection
• https://github.com/Pritt014/metasploitable2-pentest
• https://github.com/Prosper-Eromonsele/Penetration-Testing-of-Secure-Network
• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/PyTHoNsnake2004/Network-Scanning-with-Nmap
• https://github.com/R3verseIN/simple_vsftpd_2.3.4_exploit
• https://github.com/R4idB0Y/CVE-2011-2523-PoC
• https://github.com/R4idB0Y/Uno13x
• https://github.com/Rahul-issar09/CEH-Project-
• https://github.com/Raja-jpeg/Ethical-Hacking-Lab
• https://github.com/RanDomGuY84/OIBSIP
• https://github.com/Raushan95-ui/Network-Penetration-Testing
• https://github.com/RedTeamShanks/Local-Network-Vulnerability-Assessment
• https://github.com/Ritesh82-rs/Network-Penetration-Testing-with-Real-World-Exploits-and-Security-Remediation.
• https://github.com/RominaSR/pentesting-metasploit-vsFTPd
• https://github.com/SMSravya/LocalPortScanner
• https://github.com/Sanjanathawait/CEH-project-
• https://github.com/Sayantan2005/vsftpd-2.3.4
• https://github.com/SeifEldienAhmad/Penetration-Testing-on-Metasploitable2
• https://github.com/Shivamkishor-123/Network_penetration_testing_projectNetwork_penetration_testing_project
• https://github.com/Shivangi231104/MyProjectEH
• https://github.com/Shivangi231104/mp
• https://github.com/Shobit9431/CEH-Project
• https://github.com/Shreejan99/Shreejan-sCyberproj1
• https://github.com/Shubham-2k1/Exploit-CVE-2011-2523
• https://github.com/Shwetankkarn/Simulating-Real-World-Network-Exploitation-and-Defense.
• https://github.com/Somil19-tech/ethical_hacking_project
• https://github.com/SonoTommy/vsftpd_2_3_4
• https://github.com/Takarigua/sys-pattern-homework13-01
• https://github.com/Tamarasza999/main
• https://github.com/Tamarasza999/web-net-exploit
• https://github.com/Tenor-Z/SmileySploit
• https://github.com/TerjeRu/nmap-live-labs
• https://github.com/TheMangoMamba/metasploitable-vsftpd
• https://github.com/TheMatrix97/Insecure-WebStack
• https://github.com/TheMelonBomber/Pivot-Lab
• https://github.com/TopekoX/belajar-ethical-hacking
• https://github.com/Trevon-Swift/Vulnerability-Management-Project-1
• https://github.com/Uelsky/SysThreatScan
• https://github.com/Uno13x/CVE-2011-2523-PoC
• https://github.com/Uno13x/Uno13x
• https://github.com/VS-cyber-sec/metasploitable2-exploit
• https://github.com/Vasiliy-Ser/homework_12.1
• https://github.com/VoitenkoAN/13.1
• https://github.com/WanShannn/Exploit-vsftpd
• https://github.com/Wanderwille/13.01
• https://github.com/XiangSi-Howard/CTF---CVE-2011-2523
• https://github.com/Y2FuZXBh/exploits
• https://github.com/YellowFederica/MTD-with-SDN
• https://github.com/aadithya-vimal/Metasploitable2-Pentest
• https://github.com/abhishek-sharma1234/CEH-Final-Project
• https://github.com/abhisingh0073/CEH-PROJECT
• https://github.com/aeg-hit/PwnGPT
• https://github.com/agufran006/Metasploitable2-VAPT
• https://github.com/agufran006/agufran006
• https://github.com/al3ksmatee/Penetration-testing-techniques-Metasploitable-2-
• https://github.com/andaks1/ib01
• https://github.com/ankit-kumar-developer-122/Test
• https://github.com/anneelv/htb-lame
• https://github.com/aparnaa19/CVE-Exploits-on-Metasploitable2
• https://github.com/areebah890/homelabpentest
• https://github.com/austinhawthorne/net-scan
• https://github.com/ayush0749/Ayushcyberproj1
• https://github.com/basimnawaz6/Metasploitable2
• https://github.com/bobberto99/MTD-with-SDN
• https://github.com/bongguy09/Simulating-Real-World-Network-Exploitation-and-Defenses
• https://github.com/boombebomb/test_secure_scanner
• https://github.com/castiel-aj/Cybertalents-Challenges-Writeups
• https://github.com/cherrera0001/vsftpd_2.3.4_Exploit
• https://github.com/chleba124/vsftpd-exploit
• https://github.com/codeN0mad/Vulnerability-assessment-uneeq-internship-
• https://github.com/coolsikandarakr/CEH-Training-Project
• https://github.com/cowsecurity/CVE-2011-2523
• https://github.com/csk/unisecbarber
• https://github.com/cybermads/CVE-2011-2523
• https://github.com/deboogo/metasploitable-analysis
• https://github.com/deepdarkworld/EXPLOIT_CVE
• https://github.com/delsawright/Hotel-Dorsey-Penetration-Test---vsftpd-2.3.4-Exploit
• https://github.com/delsawright/System-Scan-Report_PenTesting_RedTeaming
• https://github.com/devendranirmalkar/Network_penetration_testing_project
• https://github.com/doval2222/scripts-ciberseguridad
• https://github.com/dr3amz23/CEH-Project-PiyushVerma
• https://github.com/dreighton90/megacorpone-penetration-test
• https://github.com/durjoy-10/CYBER_NOTE
• https://github.com/e0n9/PenTest-Lab-1
• https://github.com/e0n9/PenTest_Lab_1
• https://github.com/enoughdurgesh/CEH-Project
• https://github.com/everythingBlackkk/vsFTPd-Backdoor-Exploit-CVE-2011-2523-
• https://github.com/giusepperuggiero96/Network-Security-2021
• https://github.com/gsvalente/network_mapper
• https://github.com/gwyomarch/CVE-Collection
• https://github.com/hack-parthsharma/Vision
• https://github.com/harshthepro/CEH_PROJECT
• https://github.com/hibahmad30/NmapAnalysis
• https://github.com/hklabCR/CVE-2011-2523
• https://github.com/itsmeanuj311/Ethical-Hacking-Projects
• https://github.com/jaykerzb/Metasploitable
• https://github.com/jaytiwari05/vsftpd_2.3.4_Exploit
• https://github.com/k8gege/Ladon
• https://github.com/kalaiyarasan10203/ELEVATE_LABS_INTERNTASKS-NO-1
• https://github.com/kamlesh-14/End-to-End-Penetration-Test-on-Metasploitable2
• https://github.com/kamleshkumar9931/CEH-College-Project
• https://github.com/kellisfen/13-01.md
• https://github.com/kmukoo101/CVEye
• https://github.com/knightc0de/vsFTPD_exploit_2.3.4
• https://github.com/krill-x7/CVE-2011-2523
• https://github.com/lekctut/sdb-hw-13-01
• https://github.com/leoambrus/GitSec
• https://github.com/lghost256/vsftpd234-exploit
• https://github.com/likithgajula/beginner-pentesting-lab-
• https://github.com/madanokr001/CVE-2011-2523
• https://github.com/maherjas/AI-VSFTPD-Exploit
• https://github.com/malavathpradeepkumar/task_01
• https://github.com/masterkillah2009/Port-Scanner
• https://github.com/mejdahlbo/Metasploit-First-Pentest-Project-And-Report
• https://github.com/miyakonya/PyShell
• https://github.com/mjay2992/Vulnerability-Exploitation-Project
• https://github.com/muzamilhussain02/metasploitable2-exploitation
• https://github.com/n0-traces/cve_monitor
• https://github.com/naufalazhar65/ETHICAL-HACKING-DOCS
• https://github.com/nguyentony-cyber/Penetration-Testing-Lab
• https://github.com/ninahonyango/VAPT
• https://github.com/ninahonyango/View_My_Portfolio
• https://github.com/nobodyatall648/CVE-2011-2523
• https://github.com/online122004/Network_penetration_testing_project_2
• https://github.com/p4p1/EPITECH-ProjectInfoSec
• https://github.com/padsalatushal/CVE-2011-2523
• https://github.com/paralax/ObsidianSailboat
• https://github.com/pedr0alencar/vlab-metasploitable2
• https://github.com/pp0101-ppu/training
• https://github.com/priyadharshan-vadivel/metasploitable2-penetration-test
• https://github.com/priyan37/metasploitable2-penetration-test
• https://github.com/rahulkore1/-basic-vulnerability-assessment
• https://github.com/rigiba/La-biblia-negrisima-del-Ethical-Hacker
• https://github.com/rkuruba/Penetration-Testing-1
• https://github.com/rohitkumar0976/CEH-PROJECT
• https://github.com/roshan11420/Ethical-hacking-project
• https://github.com/ryutaro-sec/metasploitable-nmap-servicescan-report
• https://github.com/salmananur/metasploitable-vsftpd
• https://github.com/samjithjithu/Task-1-Nmap-Network-Scan
• https://github.com/samurai411/toolbox
• https://github.com/sanjog-shrestha/NMAP-Network-Scanning-Project
• https://github.com/sanskar30/vsftpd_2.3.4_Exploit
• https://github.com/sattwxk/nmap-vuln-scan
• https://github.com/seerat-fatima21/vsftpd-exploit
• https://github.com/shadow-here/Ethical-Hacking-Project
• https://github.com/shamsulchowdhury/Unit-16-Homework-Penetration-Testing1
• https://github.com/skjshr/metasploitable-nmap-servicescan-report
• https://github.com/slxwzk/slxwzkBotnet
• https://github.com/sponkmonk/Ladon_english_update
• https://github.com/sug4r-wr41th/CVE-2011-2523
• https://github.com/sundex222/Vulnerability-Assessment
• https://github.com/sunzu94/vsftpd_2.3.4_Exploit
• https://github.com/syedrayan5/Vulnerability-Assessment-Metasploitable2
• https://github.com/tarikemal/exploit-ftp-samba
• https://github.com/thanawut2903/Port-21-tcp-vsftpd-2.3.4-exploit
• https://github.com/thekarunakarreddy/Enterprise-Security-Assessment
• https://github.com/theowlprotocol/Incident-Response-Threat-Hunting
• https://github.com/tirath08/Network-Penetration-Testing-with-Real-World-Exploits-and-Security-Remediation
• https://github.com/vaishnavucv/CVE-2011-2523
• https://github.com/vamshikothmire/CyberSecurity-Projects
• https://github.com/vasanth-tamil/ctf-writeups
• https://github.com/vedpakhare/vsftpd-234-vuln-report
• https://github.com/vinamradutta/Ethical-Hacking-Project-
• https://github.com/vinamradutta/vinamradutta-Ethical-Hacking-Project-
• https://github.com/vipinkumar62/CEH-Final-Project
• https://github.com/vjp-pabloGG/PPS-Unidad3Actividad2-PabloGil
• https://github.com/vkshy/CEH-PROJECT
• https://github.com/vmmaltsev/13.1
• https://github.com/vonoid/attacks-on-IS
• https://github.com/whoamins/vsFTPd-2.3.4-exploit
• https://github.com/winsnu/Week-16-Pen-Testing-1
• https://github.com/yesh2312/Network-Penetration-Testing-with-Real-World-Exploits-and-Security-Remediation.
• https://github.com/zhanpengliu-tencent/medium-cve
• https://github.com/zulloper/cve-poc
• https://github.com/zwang21/Week-16-Homework-Penetration-Testing-1