Hands-On AWS Penetration Testing with Kali Linux

Exploitation on Linux

For the purpose of exploiting the vsftpd service, we shall use Metasploit, which comes with Kali Linux built in. This can be loaded up by simply entering msfconsole into the Terminal:

Here, we can simply search for the name of the service to see if there are any associated exploits. To do this, simply run the following:

search vsftpd

This will turn up a list of the exploits with that specific keyword. In this case, it is just one exploit:

We can use this exploit by running the following:

use exploit/unix/ftp/vsftpd_234_backdoor ...