Exploiting FTP services with Metasploit

Let's assume that we have another system in the network. Let's perform a quick nmap scan in Metasploit and figure out the number of open ports and services running on them as follows:

There are plenty of services running on the target. We can see we have vsftpd 2.3.4 running on port 21 of the target, which has a popular backdoor vulnerability. Let's quickly search and load the exploit module in Metasploit:

Let's set RHOST and payload for the module as follows:

We can see that when issuing the show payloads ...

Get Metasploit Revealed: Secrets of the Expert Pentester now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.