FTP ATTACK

FTP ATTACK

FTP (stands for File Transfer Protocol) is an Internet protocol that runs at the application layer which is standard for transferring files (files) between the computer machines in an internetwork.

This technique, utilizing the site admin negligence or hosting provider that allows anonymous users are allowed access to FTP .


1. Run>> CMD
2. Type ftp sitetarget.com
3. if lucky will appear the following text:

a.
Connected to sitetarget.com.
Welcome to 220 ---- ---- PureFTPd 1.0.12
220-You are user number 2 of 50 allowed.
220-Local time is now 15:21 and the load is 0:03. Server port: 21.
220 You will be disconnected after 15 minutes of inactivity.
User (sitetarget.com: (none)):
But if no luck then the text will appear like this:

b.
Connected to sitetarget.com.
220 ---- Welcome to Pure-ftpd [TLS] ----
220-You are user number 1 of 50 allowed.
220-Local time is now 21:31. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 30 minutes of inactivity.
User (sitetarget.com: (none)):
or

c.
Connected to sitetarget.com.
220 proftpd 1.3.1 Server (Debian) [:: ffff: 119.235.18.72]
User (sitetarget.com: (none)):

What difference does it make that message ..?
a. = Allow anonymous users to access FTP
b. and c. = Not allowed

4. Well if that arises is the first message, then you just type "anonymous" as username and then hit enter.

Connected to sitetarget.com.
Welcome to 220 ---- ---- PureFTPd 1.0.12
220-You are user number 2 of 50 allowed.
220-Local time is now 15:21 and the load is 0:03. Server port: 21.
220 You will be disconnected after 15 minutes of inactivity.
User (sitetarget.com: (none)): anonymous
331 Any password will work
Password:
230 Any password will work

the message is the message "Any password will work" must dah tau does not it ..? 10

Now you have FTP access, and to see what commands are available aja, type the camp can help.

May be useful .