Skip to content
HackIndex logo

HackIndex

FTP
Service

FTP

FTP file transfer service. Attackers check banners, anonymous access, writable dirs, cleartext creds, CVEs, and backdoors, then exploit for shells, brute-force, or data exfiltration

:21 23 guides 4 phases
1 min read Updated: Jul 13, 2026

What is FTP?

FTP is one of the oldest file transfer protocols — and it’s plaintext by default.

Common security issues

  • Credentials in cleartext.

  • Anonymous login.

  • Writable uploads.

  • Directory traversal risks.

Enumeration

FTP banners, anonymous access, dirs, perms, and NSE scripts

6
FTP Anonymous Access Enumeration

FTP Anonymous Access Enumeration

Enumerate FTP servers allowing anonymous login to discover exposed files, directories, and sensitive data using tools like Nmap, ftp client, and Metasploit.

Dec 29, 2025 • 2 min read

Vulnerability Discovery

FTP vulns: anonymous access, cleartext creds, writable dirs, CVEs, backdoor

7

FTP Version Vulnerability Check

Identifies FTP server versions with known CVEs by banner grabbing and cross-referencing against vulnerability databases to detect unpatched or outdated daemons.

Mar 16, 2026 • 3 min read

Exploitation

FTP exploitation via backdoors, brute-force, shells, and bounce attacks

7

ProFTPD 1.3.3c Backdoor

Exploit the ProFTPD 1.3.3c backdoor (CVE-2010-4221) introduced via a compromised source tarball, granting unauthenticated remote root shell access.

Dec 29, 2025 • 2 min read

Post-Exploitation

FTP exfiltration, config looting, and log analysis guides

3