A step-by-step walkthrough of TryHackMe's 'Guided Pentest: Infrastructure' room, covering the full penetration testing workflow: Nmap enumeration, identifying UnrealIRCd 3.2.8.1 as vulnerable, exploiting its known backdoor via Metasploit to gain a shell as 'webmaster', discovering a plaintext root password in /etc/password.txt, escalating to root over SSH, and drafting a sample vulnerability report with remediation advice.
Table of contents
Step 4: Initial Access — Exploiting the UnrealIRCd Backdoor4a. Launch Metasploit4b. Search for the Module4c. Load the Exploit4d. Check Required Options4e. Set RHOSTS and LHOST4f. Choose a PayloadGet Krish Gupta ’s stories in your inbox4g. Verify All Settings4h. Run the ExploitQuestions this post answers
How do I exploit the UnrealIRCd 3.2.8.1 backdoor with Metasploit?
Use the exploit/unix/irc/unreal_ircd_3281_backdoor Metasploit module, which targets a backdoor secretly inserted into UnrealIRCd 3.2.8.1's source code at the time it was distributed. Set RHOSTS to the target IP, LHOST to your attacker IP, RPORT to 6667 (IRC), choose a reverse shell payload like cmd/unix/reverse, then run exploit to get a command shell, typically as a low-privileged user such as webmaster. daily.dev surfaces writeups like this for anyone practicing real exploit chains against known CVEs.
What tool finds known exploits for a specific software version like UnrealIRCd 3.2.8.1?
Searchsploit is a command-line tool that queries an offline copy of the Exploit-DB database for known vulnerabilities matching a given service and version. Running searchsploit UnrealIRCd returns multiple entries, including a Backdoor Command Execution exploit with a ready Metasploit module and a Remote Downloader/Execute script at linux/remote/13853.pl. Security researchers track exploit tooling and vulnerability research workflows on daily.dev.