FTP:
Enumeration
FTP banners, anonymous access, dirs, perms, and NSE scripts
FTP Anonymous Access Enumeration
Enumerate FTP servers allowing anonymous login to discover exposed files, directories, and sensitive data using tools like Nmap, ftp client, and Metasploit.
FTP Directory & File Enumeration
Active FTP enumeration techniques covering anonymous access, directory traversal, file discovery, and permission analysis using tools like Nmap, Hydra, and raw FTP commands.
FTP Manual Enumeration Techniques
Active FTP enumeration using banner grabbing, anonymous login testing, Nmap scripts, and manual command probing to identify misconfigurations and exposed data.
FTP NSE Script Enumeration
Enumerate FTP services using Nmap NSE scripts to identify anonymous access, brute-force credentials, and disclose vulnerabilities on port 21.
FTP Permission & Upload Testing
Enumerate FTP server permissions, test anonymous access, and identify upload/write capabilities to assess misconfigurations and potential exploitation vectors.
FTP enumeration starts with banner grabbing to identify the server software and version. From there, check for anonymous login, which remains surprisingly common on internal and forgotten servers.
Directory listings reveal file structures, writable directories, and potentially sensitive files. Version information feeds into CVE matching, while supported commands and FEAT responses expose additional attack surface.
The subpages cover banner analysis, anonymous access testing, and systematic directory and file discovery.