# 21 - Pentesting FTP

[Hacktricks](https://book.hacktricks.xyz/pentesting/pentesting-ftp)

## Enumeration

**vsFTPd Config File**

```
cat /etc/vsftpd.conf | grep -v "#"
ftp <IP> #Connect
status
debug
trace
ls -R # Recursive Listing
wget -m --no-passive ftp://anonymous:anonymous@10.129.14.136 # Downloading all files
tree . # showing hiearchy of the downloaded files
```

## Footprinting

**Nmap FTP Scripts**

```
sudo nmap --script-updatedb # Update NSE DB
find / -type f -name ftp* 2>/dev/null | grep scripts #list nmap scripts
--script-trace # trace the progress of NSE scripts at the network level
```

**Service Interaction**

```
nc -nv 10.129.14.136 21
telnet 10.129.14.136 21
openssl s_client -connect 10.129.14.136:21 -starttls ftp
```
