What happened
A public source linked this CVE to an advisory or demonstration repository. Review the original reference before use.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 49757vsftpd 2.3.4 - Backdoor Command ExecutionHerculesRD2021-04-12VerifiedExploit-DB 17491vsftpd 2.3.4 - Backdoor Command Execution (Metasploit)Metasploit2011-07-05VerifiedPoC-in-GitHub · HerculesRD/vsftpd2.3.4PyExploitAn exploit to get root in vsftpd 2.3.4 (CVE-2011-2523) written in python★ 0HerculesRD2021-04-09CandidatePoC-in-GitHub · nobodyatall648/CVE-2011-2523vsftpd 2.3.4 Backdoor Exploit★ 3nobodyatall6482021-05-01CandidatePoC-in-GitHub · Gr4ykt/CVE-2011-2523https://www.exploit-db.com/exploits/49757★ 0Gr4ykt2021-08-31CandidatePoC-in-GitHub · padsalatushal/CVE-2011-2523Python exploit for vsftpd 2.3.4 - Backdoor Command Execution★ 15padsalatushal2021-11-07CandidatePoC-in-GitHub · MFernstrom/OffensivePascal-CVE-2011-2523FreePascal implementation of the vsFTPD 2.3.4 CVE-2011-2523★ 2MFernstrom2022-05-27CandidatePoC-in-GitHub · 0xSojalSec/-CVE-2011-2523Python exploit for CVE-2011-2523 (VSFTPD 2.3.4 Backdoor Command Execution)★ 00xSojalSec2022-06-09CandidatePoC-in-GitHub · 0xSojalSec/CVE-2011-2523Python exploit for CVE-2011-2523 (VSFTPD 2.3.4 Backdoor Command Execution)★ 00xSojalSec2022-06-09CandidatePoC-in-GitHub · XiangSi-Howard/CTF---CVE-2011-2523★ 0XiangSi-Howard2022-12-03CandidatePoC-in-GitHub · cowsecurity/CVE-2011-2523CVE-2011-2523 exploit★ 2cowsecurity2023-02-05CandidatePoC-in-GitHub · Lynk4/CVE-2011-2523Python exploit for vsftpd 2.3.4 - Backdoor Command Execution★ 4Lynk42023-05-09CandidatePoC-in-GitHub · vaishnavucv/CVE-2011-2523Python exploit for vsftpd 2.3.4 - Backdoor Command Execution★ 0vaishnavucv2023-10-16CandidatePoC-in-GitHub · 4m3rr0r/CVE-2011-2523-pocPython exploit for CVE-2011-2523 (VSFTPD 2.3.4 Backdoor Command Execution)★ 44m3rr0r2023-11-28CandidatePoC-in-GitHub · Shubham-2k1/Exploit-CVE-2011-2523★ 0Shubham-2k12024-03-05CandidatePoC-in-GitHub · Tenor-Z/SmileySploitA basic script that exploits CVE-2011-2523★ 0Tenor-Z2024-04-23CandidatePoC-in-GitHub · 0xB0y426/CVE-2011-2523-PoCPoC CVE-2011-2523★ 00xB0y4262024-05-27CandidatePoC-in-GitHub · AnugiArrawwala/CVE-ResearchCVE-2017-0144 (Eternal Blue) | CVE-2023-3881 | CVE-2011-2523★ 0AnugiArrawwala2024-07-03CandidatePoC-in-GitHub · Gill-Singh-A/vsFTP-2.3.4-Remote-Root-Shell-ExploitA Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability (CVE-2011-2523) present in vsFTP 2.3.4★ 2Gill-Singh-A2024-08-03CandidatePoC-in-GitHub · Lychi3/vsftpd-backdoorExploit hecho en python para vsftpd 2.3.4 | CVE-2011-2523★ 0Lychi32025-02-19CandidatePoC-in-GitHub · vedpakhare/vsftpd-234-vuln-reportVulnerability assessment and exploitation of vsftpd 2.3.4 (CVE-2011-2523) using Metasploit. Full report and proof of root access included.★ 2vedpakhare2025-04-05CandidatePoC-in-GitHub · cybermads/CVE-2011-2523★ 1cybermads2025-04-06CandidatePoC-in-GitHub · sug4r-wr41th/CVE-2011-2523vsFTPd 2.3.4 CVE-2011-2523 PoC★ 0sug4r-wr41th2025-04-12CandidatePoC-in-GitHub · JohanMV/explotacion-vsftpd-nmap_Laboratorio_1Laboratorio técnico de ciberseguridad donde se realiza reconocimiento de red con Nmap y explotación de la vulnerabilidad CVE-2011-2523 (vsftpd 2.3.4) mediante Metasploit Framework. Proyecto académico orientado a demostrar habilidades en análisis de vulnerabilidades, uso de herramientas de pentesting y reporte técnico.★ 0JohanMV2025-04-14CandidatePoC-in-GitHub · lghost256/vsftpd234-exploitExploit for CVE-2011-2523.★ 0lghost2562025-06-19CandidatePoC-in-GitHub · hklabCR/CVE-2011-2523★ 0hklabCR2025-07-06CandidatePoC-in-GitHub · krill-x7/CVE-2011-2523Python exploit for vsftpd 2.3.4 - Backdoor Command Execution★ 1krill-x72025-07-12CandidatePoC-in-GitHub · BolivarJ/CVE-2011-2523Python exploit for vsftpd 2.3.4 - Backdoor Command Execution★ 4BolivarJ2025-08-11CandidatePoC-in-GitHub · KlyneZyro/Metasploitable2-VAPT-ReportComprehensive Penetration Testing report and exploit chain for Metasploitable 2 focusing on CVE-2011-2523.★ 0KlyneZyro2025-12-22CandidatePoC-in-GitHub · Mirza-22144/Vulnerability-Assessment-Exploitation-LabFull-lifecycle penetration test of a legacy Linux environment (Metasploitable 2) emulated on Apple Silicon. Demonstrating network reconnaissance, RCE via service backdoors (CVE-2011-2523), and cryptographic credential recovery.★ 0Mirza-221442026-01-09CandidatePoC-in-GitHub · tshaq17/vsftpd-2.3.4---Backdoor-Command-Executionvsftpd 2.3.4 (CVE-2011-2523) a critical vulnerability that leads to Reverse Root Shell. In this repo I will do a PoC how to exploit it step by step, Manually & Automatically (Python) for educational purposes.★ 0tshaq172026-01-20CandidatePoC-in-GitHub · Efehamzaa/Metasploit-Red-Pentest-LabMetasploitable 2 üzerinde vsftpd 2.3.4 (CVE-2011-2523) zafiyetinin istismarı ve sızma sonrası adımlarını içeren laboratuvar çalışması.★ 1Efehamzaa2026-01-29CandidatePoC-in-GitHub · yagnikkrish/metasploitable-penetration-testing-labControlled penetration testing lab demonstrating CVE-2011-2523 exploitation and mitigation techniques.★ 0yagnikkrish2026-02-28CandidatePoC-in-GitHub · brettsm/vsftpd2.3.4-backdoor-exploitvsftpd 2.3.4 Backdoor Exploit (CVE-2011-2523)★ 0brettsm2026-03-19CandidatePoC-in-GitHub · Tr00jan99/PwnTillDawn-Portal-WalkthroughA detailed penetration testing walkthrough and exploitation report for the 'Portal' machine, focusing on CVE-2011-2523 (vsFTPd 2.3.4 Backdoor) to achieve root access.★ 0Tr00jan992026-03-21CandidatePoC-in-GitHub · Dahalsamir/CVE-2011-2523-exploit★ 0Dahalsamir2026-04-04CandidatePoC-in-GitHub · RinAliyeva/metasploitable2-vsftpd-exploitationProject: vsFTPd 2.3.4 backdoor exploitation (CVE-2011-2523) on Metasploitable 2.★ 0RinAliyeva2026-04-07CandidatePoC-in-GitHub · emilebarnard242/pentest-metasploitable2A documented penetration testing lab built on Kali Linux and Metasploitable2, walking through a full attack chain from network traffic analysis and service enumeration through to exploiting the vsftpd 2.3.4 backdoor (CVE-2011-2523) and achieving root access. Includes blue team detection notes and MITRE ATT&CK mapping throughout.★ 0emilebarnard2422026-04-15CandidatePoC-in-GitHub · Mithileshan/soc-investigation-labEnd-to-end SOC investigation: CVE-2011-2523 kill chain, multi-source log correlation, incident report — MITRE ATT&CK T1190★ 0Mithileshan2026-04-24CandidatePoC-in-GitHub · IvoAlbacete/Kali-MetasploitableEscaneo de vulnerabilidades, análisis de tráfico con Wireshark y explotación controlada del CVE-2011-2523 (vsftpd 2.3.4) en entorno de red segura.★ 0IvoAlbacete2026-04-29CandidatePoC-in-GitHub · Amirmuhammadmarvi/network-security-labControlled virtual attack & defense lab — CVE-2011-2523 exploitation, Nmap recon, Nikto scanning, UFW hardening on Metasploitable 2★ 0Amirmuhammadmarvi2026-05-04CandidatePoC-in-GitHub · Prafullya-Shandilya/metasploitable-pentest-reportBlack-box penetration test on Metasploitable 2 — Identified 3 critical vulnerabilities including CVE-2011-2523. Conducted in isolated VMware lab. Tools: Nmap, Metasploit, Netcat.★ 0Prafullya-Shandilya2026-05-09CandidatePoC-in-GitHub · Taisa456/network-security-snortSnort 3 IDS → IPS lab on Kali. Custom detection rules + iptables enforcement against ICMP recon, Nmap SYN scans, Hydra FTP brute force, and vsftpd 2.3.4 backdoor (CVE-2011-2523).★ 0Taisa4562026-05-14CandidatePoC-in-GitHub · ByteForgeFr/CVE-2011-2523VsFTPd 2.3.4 Backdoor Command Execution★ 1ByteForgeFr2026-05-15CandidatePoC-in-GitHub · Jhatchi/NexaCorp-DFIR-INC-2026-001DFIR investigation + 7 Suricata rules on a simulated NexaCorp intrusion (vsftpd 2.3.4 CVE-2011-2523 + MITRE Caldera C2). 4-day solo engagement (BeCode Brussels Mission 01). 54-page report, 10 findings, 7/7 rules validated by PCAP replay.★ 0Jhatchi2026-05-17CandidatePoC-in-GitHub · Chathura123git/ethical-hacking-CVE-2011-2523Ethical Hacking Assessment | Practical vulnerability testing of vsftpd 2.3.4 backdoor (CVE-2011-2523) on Metasploitable2 using Kali Linux & Metasploit★ 0Chathura123git2026-05-23CandidatePoC-in-GitHub · NitinSukthe-G/OpenVAS-Vulnerability-Assessment-Incident-ResponsePerformed a Full & Fast vulnerability assessment using OpenVAS against Metasploitable2, identified the critical vsftpd Backdoor vulnerability (CVE-2011-2523), and developed containment, remediation, and incident response documentation.★ 0NitinSukthe-G2026-06-02CandidatePoC-in-GitHub · H4R335HR/vsftpd-234-backdoorDependency-free interactive Python exploit for the vsftpd 2.3.4 backdoor (CVE-2011-2523).★ 0H4R335HR2026-06-05CandidatePoC-in-GitHub · kn9annihilator/CVE-2011-2523-vsFTPd-2.3.4-Writeup★ 0kn9annihilator2026-07-03CandidatePoC-in-GitHub · Orevic21/wazuh-home-socWazuh + Suricata SOC lab detecting real exploits (CVE-2011-2523) and brute-force attacks, with custom detection rules for gaps in default IDS signatures.★ 0Orevic212026-07-11CandidatePoC-in-GitHub · solomonhenry-afk/vsftpd-cve-2011-2523-detection-signatureCVE research-to-detection-signature engineering project: fingerprinting the vsftpd 2.3.4 backdoor (CVE-2011-2523) externally, at scale, with validated false-positive/negative handling - built in Python★ 1solomonhenry-afk2026-07-12CandidatePoC-in-GitHub · IndiQuarks/vsftpd-cve-2011-2523-labPen Tesing Lab exploiting VSFTPD 2.3.4 backdoor via Metasploit Framework★ 0IndiQuarks2026-07-14CandidatePoC-in-GitHub · khalilu020/offensive-security-adversary-emulationSimulated a real-world attack (CVE-2011-2523) against a vulnerable host, then cross-checked detection coverage against an existing Wazuh/Suricata/Zeek SOC — uncovering and fixing 5 real monitoring pipeline bugs along the way.★ 0khalilu0202026-07-28CandidatePoC-in-GitHub · IrsaAttiqueCyber/SystemVulnerabilityChecklist_Project4_DecodelabsSystem Vulnerability Checklist & Network Security Hardening project featuring reconnaissance, vsFTPd backdoor analysis (CVE-2011-2523), and active transport-layer mitigation using IPTables.★ 0IrsaAttiqueCyber2026-08-01CandidatePoC-in-GitHub · alexojocyber/cve-2011-2523-vsftpd-validation-labAuthorized Kali–Metasploitable2 lab using Python and Nmap NSE to validate CVE-2011-2523 in vsFTPd 2.3.4.★ 0alexojocyber2026-08-10CandidatePoC-in-GitHub · sonalisarkar-2003/FTP-vsFTPD-CVE-2011-2523-VAPT-Report★ 0sonalisarkar-20032026-08-13CandidatePoC-in-GitHub · aish19siddiqua-commits/mtechweek_04Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC (CVE-2004-2687), privilege escalation via udev netlink (CVE-2009-1185), and vsftpd 2.3.4 backdoor analysis (CVE-2011-2523), with firewall mitigation validated end-to-end.★ 0aish19siddiqua-commits2026-08-22CandidatePoC-in-GitHub · rsakthikumar-cmd/metasploitable2-vsftpd-writeupExploiting the vsftpd 2.3.4 backdoor (CVE-2011-2523) on Metasploitable2 — a hands-on pentesting lab writeup covering recon, exploitation, and remediation.★ 0rsakthikumar-cmd2026-08-23CandidatePoC-in-GitHub · Gvln-S/CVE-2011-2523★ 0Gvln-S2026-08-27CandidatePoC-in-GitHub · ronankongala/metasploit-pentest-reportAuthorized penetration test against Metasploitable2 and TryHackMe Blue. 3 CVEs exploited (CVE-2011-2523, CVE-2007-2447, CVE-2017-0144), 4 findings with CVSS scoring and MITRE ATT&CK mapping.★ 0ronankongala2026-08-29CandidatePoC-in-GitHub · aboubacar70/LAB1-metasploitableExploitation des vulnérabilités sur la version vsftpd 2.3.4 du service ftp (CVE-2011-2523)★ 0aboubacar702026-09-02CandidatePoC-in-GitHub · JUN41DS2709/vsFTPd-2.3.4-ExploitPython exploit for the vsFTPd 2.3.4 backdoor (CVE-2011-2523).★ 1JUN41DS27092026-09-02CandidatePoC-in-GitHub · samirchapagain/metasploit-lab-reportEducational penetration testing lab report demonstrating exploitation of vsftpd 2.3.4 backdoor vulnerability (CVE-2011-2523) in Metasploitable 2 using Metasploit Framework. Includes detailed documentation of reconnaissance, vulnerability analysis, configuration, verification, and exploitation phases.★ 0samirchapagain2026-09-08CandidateSource timeline
Discovered through Exploit-DBView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.