Exploit for Pentest-Home-Lab CVE-2011-2523

## https://sploitus.com/exploit?id=2BCEB7A1-C5BC-5E9A-9B74-866B897EE5E9
# Pentest Home Lab

A personal cybersecurity home lab for practicing vulnerability assessment, exploitation techniques, and network analysis in an isolated environment. Built as part of ongoing coursework toward an MS in Cybersecurity and Applied AI.

## Lab Environment

- **Hypervisor:** VirtualBox
- **Attacker machine:** Kali Linux
- **Target machine:** Metasploitable2 (intentionally vulnerable Linux VM)
- **Network:** Isolated host-only/internal network (192.168.100.0/24), no internet-facing exposure

All testing in this repository was performed against machines I own and control, within a network isolated from production or public-facing systems.

## Findings

| Finding | Target Port | Severity | Write-up |
|---|---|---|---|
| vsftpd 2.3.4 backdoor (CVE-2011-2523) | 21/tcp | Critical | [metasploitable2/vsftpd-2.3.4-backdoor.md](metasploitable2/vsftpd-2.3.4-backdoor.md) |
| Unauthenticated root shell | 1524/tcp | Critical | [metasploitable2/unauth-root-shell-port-1524.md](metasploitable2/unauth-root-shell-port-1524.md) |

## Tools Used

- Nmap — host discovery and service/version enumeration
- Metasploit Framework — exploit development and execution
- Netcat — raw socket connections
- Wireshark — packet capture and traffic analysis

## Purpose

This lab documents hands-on exploitation of known vulnerabilities in a controlled setting to build practical skills in reconnaissance, exploitation, and reporting, skills directly applicable to vulnerability assessment and penetration testing roles.