Now, as you probably already know, file transfer protocol, or FTP, is used for the transfer of files
between a client and a server using Port 21.
Poorly configured FTP servers can be a good foothold.
So you can run some MSF modules to enumerate FTP servers and gain some important information, such
as software version, better info and all that.
Aside from this.
The FTP servers authenticate users with a clear text sign in mechanism.
Moreover, it can sometimes allow anonymous login.
So why don't we enumerate an FTP service?
So let's have a look and see which hosts have FTP services.
All right, so both of them have.
But sometimes administrators use different ports for the services, so let's try a search with the best
parameter.
And just like that, you can find all the FTP servers that DB and MAP Command discovered.
And yeah, as you see here, there's an active service running on 21 21.
And then you'll get this list if you search for FTP auxiliaries.
And I'll just use these ones here.
Use auxiliary scanner FPP and F.T. version module show options.
I think he said.
So let's run the module.
And there's a result.
Now, you can do the same process for every FTP board.
But here's an important point, if you get the version, look for vulnerabilities on the Internet or
somewhere else.
So what I'll do is I'll copy and then search Google or whatever your favorite search engine is.
And you see these FDP has a vulnerability for this particular version and even Métis Point as a model
for this.
So make a note of that, because you will use it later.
Oh, and by the way, this is a lab environment, remember, but the logic is 100 percent the same as
in any real penetration testing.
So I'll use another module.
FTP log in.
Showing options and here are the final variables.
So I'm going to allow blank passwords.
And username as password.
And here on set user parse file to my FTP dictionary file.
I'll create this list from the same address that I did for my high school.
All right.
Run the module.
And I think you'll probably find one bear, so make a note of that to.
Now, one more module.
Some FTP modules allow for anonymous logins.
So when you perform a vulnerability scan, you probably are going to get this finding.
But you can quickly check to see if any of us discovered FTP services allowances.
That's why this module is so handy.
So options.
OK, so I'll need to configure nothing, so I'll just run the module.
And the result comes up pretty quickly, so, yeah, you can connect this FTP service on Métis, avoidable
to anonymously.
So now that we got the hang of that, let's enumerate some other services.