📖 CyberBook

Appearance

📂 FTP - 21 ​

🕵️‍♂️ Enum ​

bash
nmap -p21 --script ftp-anon,ftp-bounce <IP>
bash
# anonymous
ftp <ip> -p <port> # username: 'anonymous', password: <blank>

Brute-force ​

bash
hydra -l user -P wordlist.txt ftp://<IP>

Upload / Exploit ​

If directory is writable, it's possible to upload a webshell

bash
put shell.php