Question

During an internal engagement, your version scan reveals a host running vsftpd 2.3.4 on TCP 21. Before attempting any exploitation, you want to determine whether a public exploit exists for this exact software version and understand the attack vector it uses. Which action most directly accomplishes this research step?

Accepted Answer

Run searchsploit vsftpd 2.3.4 to query the local Exploit-DB copy for matching entries, then read the exploit source to confirm the version and vector

Answer

Re-run the Nmap version scan with -sV --version-intensity 9 to confirm the banner is not a false positive before doing anything else

Answer

Launch the exploit immediately with Metasploit's vsftpd_234_backdoor module and observe whether a session opens

Answer

Query the NVD CVSS calculator to compute a base score for the finding and record it in the report