21 - FTP

Connect to the ftp-server to enumerate software and version

ftp user@ip

nc  -vn <ip> 21

nmap -sV -p21 -sC -A <ip>

nmap --script ftp-* -p 21 <ip>

Always try to login with anonymous credentials.

FTP Bounceback

If an ftp server allows the PORT command, it can be used to scan which ports are open through an FTP server. To do this:

1. upload a text file containing the request.

2. use REST x to so you don't send the characters you do not want to send.

3. use PORT to connect to the server and services.

4. use RETR to send the saved request