Skip to content

FTP:

Enumeration

FTP banners, anonymous access, dirs, perms, and NSE scripts

6 guides • Created Dec 28, 2025 • Updated Mar 29, 2026
6 guides
FTP Anonymous Access Enumeration

FTP Anonymous Access Enumeration

Enumerate FTP servers allowing anonymous login to discover exposed files, directories, and sensitive data using tools like Nmap, ftp client, and Metasploit.

Dec 29, 2025 • 3 min read

FTP Banner & Server Enumeration

Techniques for extracting FTP server banners, identifying software versions, and enumerating service details to map attack surface during reconnaissance.

Dec 29, 2025 • 3 min read

FTP Directory & File Enumeration

Active FTP enumeration techniques covering anonymous access, directory traversal, file discovery, and permission analysis using tools like Nmap, Hydra, and raw FTP commands.

Dec 29, 2025 • 3 min read

FTP Manual Enumeration Techniques

Active FTP enumeration using banner grabbing, anonymous login testing, Nmap scripts, and manual command probing to identify misconfigurations and exposed data.

Dec 29, 2025 • 3 min read

FTP NSE Script Enumeration

Enumerate FTP services using Nmap NSE scripts to identify anonymous access, brute-force credentials, and disclose vulnerabilities on port 21.

Dec 29, 2025 • 3 min read

FTP Permission & Upload Testing

Enumerate FTP server permissions, test anonymous access, and identify upload/write capabilities to assess misconfigurations and potential exploitation vectors.

Dec 29, 2025 • 5 min read

FTP enumeration starts with banner grabbing to identify the server software and version. From there, check for anonymous login, which remains surprisingly common on internal and forgotten servers.

Directory listings reveal file structures, writable directories, and potentially sensitive files. Version information feeds into CVE matching, while supported commands and FEAT responses expose additional attack surface.

The subpages cover banner analysis, anonymous access testing, and systematic directory and file discovery.