FTP

FTP Enumeration

FTP (File Transfer Protocol)

FTP is a standard network protocol used for transferring files between computers.

TFTP (Trivial File Transfer Protocol)

TFTP is a simple, lightweight protocol used to transfer files between devices on a network. It is less secure and typically used in internal networks.

---

TFTP Commands

Download a File

get filename.txt

Downloads a single file from the server.

get file\\ name.txt

If a file has a space in its name (e.g., file name.txt), escape the space with \\.

Download All Available Files

wget -m --no-passive ftp://username:password@10.10.10.10

Recursively downloads all files from the FTP server using wget.

Upload a File

put upload.txt

Uploads a file from your local machine to the FTP server.

---

Update Nmap Scripts

sudo nmap --script-updatedb

Updates the local Nmap script database so new or modified scripts are recognized.

List Nmap FTP Scripts

find / -type f -name ftp* 2>/dev/null | grep scripts

Searches your system for all FTP-related Nmap scripts.

---

Nmap Scan

sudo nmap -sV -p21 -sC -A 10.10.10.10

Runs an Nmap scan on port 21 (FTP). It includes default scripts (-sC), service version detection (-sV), and aggressive mode (-A).

---

Service Interaction

ftp 10.10.10.10

Connects directly to the FTP service.

nc -nv 10.10.10.10 21

Uses netcat to manually interact with the FTP service.

telnet 10.10.10.10 21

Alternative method to connect to the FTP service using Telnet.

---

FTP Server with TLS/SSL Encryption

openssl s_client -connect 10.10.10.10:21 -starttls ftp

Checks if the FTP server supports TLS/SSL encryption by starting a secure session.

---

Documentation

• FTP Basics: https://www.rfc-editor.org/rfc/rfc959

• TFTP Basics: https://www.rfc-editor.org/rfc/rfc1350

• Nmap: https://nmap.org/book/man.html

• OpenSSL: https://www.openssl.org/docs/

• Wget: https://www.gnu.org/software/wget/manual/wget.html