Skip to content

Latest commit

 

History

20 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 

Repository files navigation

Security & Homelab Research

Documentation of my hands-on cybersecurity research, lab writeups and vulnerability analysis notes.


Documented Research & Labs

Vulnerability Target Environment Key Focus
CVE-2011-2523 Metasploitable 2 vsftpd 2.3.4 backdoor exploit analysis, Cyber Kill Chain mapping and network captures.
CVE-2016-6664 Metasploitable 3 MySQL/MariaDB/Percona Root Privilege Escalation.
More labs and writeups coming as I work through new targets and challenges!

Tools & Stack

  • OS & Environment: Kali Linux, Parrot OS, Ubuntu, Metasploitable 2, Metasploitable 3, Windows 10 Pro, Windows 11 Pro
  • Analysis & Recon: Nmap, Wireshark, Metasploit
  • Scripting: Python 3, Bash

Disclaimer

For educational purposes and defensive security research.

About

The modified source code contained a backdoor in str.c. When a client attempts to log in with a username ending in the smiley face sequence ":)", the daemon opens a listening shell bound to TCP port 6200 with the privileges of the running vsftpd process (typically root).

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors