Backdoor Attacks

In this tutorial, we are going to be attacking a vulnerable machine to gain a shell through a backdoor. For this purpose, we are going to use an exploit to break in through the vsftpd service.

Step 1: Initiate Metasploit

Firstly, assuming we had already performed discovery scans, we will initialize Metasploit and use this command:

msf  > use/exploit/unix/ftp/vsftpd_234_backdoor

Capture3

Step 2: Run the exploit and gain access

Before we set our targeting parameters, it is advised to view the current options with the ‘show options’ command.

Capture4.PNG

After which we set our victim host’s IP address and the port we wish to gain entry with and we run the program.

Capture5

Capture6.PNG

In the above screen shot, we have achieved access to the target host and opened up a shell on our sides. We are free to manipulate its functions however way we wish.

Video Tutorial: