What problem does it solve?
When a penetration test or security assessment reveals an open FTP service on port 21, testers need a structured methodology to enumerate the service, test anonymous access, brute-force credentials, and exploit known vulnerabilities without missing critical attack paths.
Core Features & Use Cases
- Phased Testing Workflow: Guides the assessment through service discovery and version fingerprinting, anonymous login testing, directory enumeration and file download, credential brute-forcing with Hydra/Medusa/Nmap, and vulnerability exploitation.
- Known Exploit Coverage: Documents exploitation of vsftpd 2.3.4 backdoor, ProFTPD mod_copy (SITE CPFR/CPTO), FTP-to-webroot webshell upload chains, and FileZilla Server management port attacks.
- FTP Bounce Attacks: Details PORT/EPRT-based bounce port scanning, protocol interaction through FTP servers, and cross-FTP file theft techniques.
- Use Case: During an internal network assessment, nmap shows port 21 open running vsftpd. Use this Skill to grab the banner, test anonymous login, recursively download exposed files with wget, check write permissions, and if the version is 2.3.4, trigger the backdoor for a root shell on port 6200.
Quick Start
Ask the agent to run the FTP pentesting methodology against the target IP with port 21 open, starting with banner grabbing and anonymous login testing.
