challenge/box-vsftpd-backdoor
Legacy FTP
Full Pwn
by admin
150
points
0 solves
Best on a computer. This is a full machine to hack. You need a computer with your own tools. You can still continue here if you want.
Briefing
A legacy FTP server has been discovered on a corporate network during a routine audit. The service appears to be running an outdated version of vsftpd that was never patched. Your mission is to identify the vulnerability, gain access, and escalate to full control.
Objectives
- Enumerate the FTP service and identify the vulnerable version
- Exploit the known vulnerability to gain a shell and retrieve the user flag
- Escalate to root and retrieve the root flag
Services
| Port | Service |
|---|---|
| 21 | FTP |
| 22 | SSH |
Notes
- This is a fullpwn box — spawn it to get your own attacker terminal and a dedicated target.
- Two flags: submit the user flag and the root flag separately.
- Dynamic flags are generated per spawn. Do not share flags with others.
- Research the version number carefully — it has a notorious history.