6-20 vulnerability exploitation proftpd test

proftpd Introduce

ProFTPD: One Unix Platform or class Unix On the platform （ Such as Linux,FreeBSD etc. ） Of FTP Server program

http://www.proftpd.org/

You can download the corresponding version , And then build the environment

Target detection proftpd

Use nmap -sV -p 2121 IP Address Target detection proftpd Version information

ad locum , We can clearly detect the version information

We first detect the open port of the target

nmap 192.168.1.105

below , We will use specific version information , To detect target information

nmap -sV -p 2121 192.168.1.105

above , We have completed the corresponding version detection

exploit-db Search for target vulnerabilities

stay https://www.exploit-db.com/ Enter the corresponding software and version to search for vulnerabilities

If not searched , It shows that there are no specific vulnerabilities in this version

searchsploit proftpd 1.3

You can see this is 1.3 A loophole in the

searchsploit proftpd 1.3.1

We see 1.3.1 There is no corresponding vulnerability found , Of course , We can also take proftpd Version vulnerability , Try this

msf Brute force

Use metasploit Under the auxiliary/scanner/ftp/ftp_login Conduct target detection

You can see that there are many loopholes , We can according to the actual situation , Download the version for testing , We download... From the official website , You can install and build , You can see a lot of rce Loophole

msfconsole
use auxiliary/scanner/ftp/ftp_login
show options

set rhosts 192.168.1.105
set rport 2121

When we set it up , You can set 21 Port no. , Premise is , This port , function ftp service ,rhosts Be sure to set specific IP Address , perhaps CIDR, Will be under the current IP Address , Guess

set username msfadmin

On the ground , We can also set the corresponding user file

set password msfadmin
run

1、 Upgrade the software to the latest version , Version without vulnerability

2、 Strengthen monitoring , Strengthen the monitoring of the current system , Turn off unnecessary ports