Vsftpd 208 Exploit Github Install Review

def exploit # ... end end

include Msf::Exploit::Remote::Ftp

def initialize(info = {}) super(update_info(info, 'Name' => 'vsftpd 2.0.8 Backdoor Command Execution', 'Description' => 'This module exploits a malicious backdoor that was added to the vsftpd 2.0.8 source code.', 'Author' => 'rapid7', 'Version' => '$Revision: $', 'References' => [ [ 'CVE', '2011-2523' ], [ 'OSVDB', '74721' ], [ 'URL', 'http://seclists.org/fulldisclosure/2011/Jul/597' ] ], 'DefaultOptions' => { 'Wfsdelay' => 1, }, 'Payload' => { 'DisableNops' => true, 'Space' => 1024, 'BadChars' => "\x00\x0a\x0d", }, 'Platform' => 'linux', 'Arch' => ARCH_X86, 'Targets' => [ [ 'vsftpd 2.0.8 on Ubuntu 10.04', { } ], ], 'DisclosureDate' => 'Jul 7 2011', 'DefaultTarget' => 0)) vsftpd 208 exploit github install

def check # ... end

The exploit is a stack-based buffer overflow vulnerability in the vsftpd server. An attacker can exploit this vulnerability by sending a specially crafted FTP command, which can lead to arbitrary code execution on the server. The exploit is highly reliable and can be used to gain root access to the server. def exploit #