FTP:
Exploitation
FTP exploitation via backdoors, brute-force, shells, and bounce attacks
FTP Anonymous Login Exploitation
Exploit anonymous FTP login to gain unauthorised access, enumerate files, and extract sensitive data using tools like ftp, Nmap, and Metasploit.
FTP Authentication Attacks
Exploiting FTP authentication weaknesses via brute force, credential stuffing, and anonymous login abuse to gain unauthorised access to FTP services.
FTP Bounce Attack Exploitation
Exploit FTP PORT command misuse to proxy scans and connections through misconfigured FTP servers, bypassing firewalls and obscuring attack origin.
FTP Credential Exploitation
Exploit FTP authentication weaknesses using anonymous access, brute-force attacks, and credential stuffing to gain unauthorised access to FTP servers.
FTP Web Shell Upload
Upload web shells via FTP to gain remote code execution. Covers anonymous/authenticated access, shell deployment, and triggering execution through a web server.
ProFTPD 1.3.3c Backdoor
Exploit the ProFTPD 1.3.3c backdoor (CVE-2010-4221) introduced via a compromised source tarball, granting unauthenticated remote root shell access.
vsftpd 2.3.4 Backdoor
Exploit the infamous vsftpd 2.3.4 backdoor vulnerability, triggering a root shell via malicious smiley-face username on port 6200.
FTP exploitation takes the findings from enumeration and turns them into access. Anonymous write permissions let you upload web shells or overwrite configuration files. Known CVEs in ProFTPD, vsftpd, and other implementations provide direct code execution paths.
Credential brute-forcing against FTP is effective when lockout policies are absent, which is common. Backdoor detection covers trojanized builds like the vsftpd 2.3.4 backdoor that still shows up on legacy systems.
Techniques below cover anonymous upload abuse, version-specific exploits, and credential attacks.