21 - Pentesting FTP

Hacktricks

Enumeration

vsFTPd Config File

cat /etc/vsftpd.conf | grep -v "#"
ftp <IP> #Connect
status
debug
trace
ls -R # Recursive Listing
wget -m --no-passive ftp://anonymous:anonymous@10.129.14.136 # Downloading all files
tree . # showing hiearchy of the downloaded files

Footprinting

Nmap FTP Scripts

sudo nmap --script-updatedb # Update NSE DB
find / -type f -name ftp* 2>/dev/null | grep scripts #list nmap scripts
--script-trace # trace the progress of NSE scripts at the network level

Service Interaction

nc -nv 10.129.14.136 21
telnet 10.129.14.136 21
openssl s_client -connect 10.129.14.136:21 -starttls ftp