📑
Security Notes
  • Readme
  • Resources
    • Useful sites
    • Metasploit
      • Searchsploit
      • Msfvenom
      • Meterpreter
    • Shells
    • Linux
      • Cron
      • Connection
      • Compilers
    • Windows
      • Kernel exploits table
    • Bruteforce
      • Checklist
      • John the Ripper
      • Hashcat
    • BOF
      • Assembly
    • Gaining access checklist
  • Cloud - AWS
    • Enumeration
    • References
    • Bucket S3
      • Public Bucket
      • AMI Files
      • File upload to RCE
    • EC2
      • cloud-init Exploits
      • SSRF To AWS Role compromise
      • Unencrypted EBS
    • IAM
      • Account Disclosure by resource policy
    • Lambda Function
      • Code Injection
      • Attacking APIs
    • VPC
      • Expose Resources
  • Networking
    • Nmap
      • Scan types
    • TCPDump
    • Port forwarding
    • Ports
      • 21 - FTP
      • 22 - SSH
      • 25 465 587 - SMTP
      • 53 - DNS
      • 110 995 - POP3
      • 111 - NFS
      • 113 - Ident
      • 123 - NTP
      • 135 137 139 - RPC
      • 143 993 - IMAP
      • 161 - SNMP
      • 389 - LDAP
      • 139 445 - SMB
      • 873 - Rsync
      • 6379 - Redis
      • 6667 - IRC
  • Linux PrivEsc
    • Checklist
    • Enumeration
      • Important files
      • Memory Dump
    • Privileges Exploitation
    • Wildcard Exploits
    • Sudo Exploits
    • Docker Container
    • Docker Groups
    • Common Exploits
  • Windows PrivEsc
    • Checklist
    • Enumeration
      • Important Files
    • Antivirus evasion tools
    • Unquoted paths
    • Always install elevated
    • Vulnerable services
    • Client side
    • Exploitable privileges
      • Juicy Potato
    • UAC bypass
    • Common Exploits
  • Active Directory
    • Introduction
    • Checklist
    • Enumeration
    • Enable RDP
    • Kerberos
    • Rubeus
    • Credentials harvesting
      • Domain Controller specific
    • Connection
    • Pass The Hash
    • Kerberoast
    • ASREProast
    • Tickets
  • Web Attacks
    • Checklist
    • Enumeration
      • URL bruteforcing
    • APIs and Fields
    • Authentication
    • Filter Evasion
      • Fuzzying and encoding
    • File Vulnerabilities
      • LFI List
      • PHP shells
    • RCE
    • Code Injection
    • Dependency Injection
    • Joomla
    • Wordpress
    • WebDAV
    • HTTP
    • XSS
      • DOM Based
      • Reflected
      • Filter Evasion
    • SSI
    • SSTI
    • RCE
    • CSRF
    • SQL injection
      • sqlmap
      • PostgreSQL
      • Oracle
      • MSSQL
      • MySQL
      • Login
    • XPath injection
    • XXE
    • CORS
  • MOBILE PENTESTING
    • Static Code Analysis
    • Dynamic Code Analysis
    • Network Traffic Analysis
Powered by GitBook
On this page
  • Usage
  • Login
  • Commands
  • Download all
  1. Networking
  2. Ports

21 - FTP

FTP usage and enumeration

Usage

Login

ftp <username>@<ip>

Anonymous login:

ftp <domain>
user: anonymous
password: mail@mail.com

Commands

?        to request help or information about the FTP commands
ascii    to set the mode of file transfer to ASCII (this is the default and transmits seven bits per character)
binary   to set the mode of file transfer to binary
bye      to exit the FTP environment (same as quit)
cd       to change directory on the remote machine
close    to terminate a connection with another computer but still leaves you within the FTP environment
delete   to delete (remove) a file in the current remote directory (same as rm in UNIX)
get      to copy one file from the remote machine to the local machine
help     to request a list of all available FTP commands
lcd      to change directory on your local machine (same as UNIX cd)
ls       to list the names of the files in the current remote directory
mkdir    to make a new directory within the current remote directory
mget     to copy multiple files from the remote machine to the local machine
mput     to copy multiple files from the local machine to the remote machine
open     to open a connection with another computer
passive  to toggle passive mode in order to avoid problems with client-side firewalls
put      to copy one file from the local machine to the remote machine
pwd      to find out the pathname of the current directory on the remote machine
quit     to exit the FTP environment (same as bye)
rmdir    to remove (delete) a directory in the current remote directory

Download all

wget -m --user="<user>@<ip>" --password="<pass>" ftp://<ip or host>/
wget -m ftp://anonymous@<ip>/
PreviousPortsNext22 - SSH

Last updated 2 years ago