proto-ftp

Review FTP service security configurations via banner enumeration and TLS posture assessment.

Updated Jul 30, 2026
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-ftp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: proto-ftp
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/proto-ftp
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-ftp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured, safe, and policy-gated framework for assessing the security posture of FTP services, ensuring that configuration reviews are conducted without unauthorized exploitation or data exposure.

Core Features & Use Cases

  • Passive Discovery: Safely identifies FTP service versions and banners without triggering intrusive scans.
  • Configuration Audit: Evaluates TLS posture, anonymous access settings, and potential bounce attack vectors against established security policies.
  • Use Case: During a security assessment, use this skill to verify if a client's FTP server is correctly configured to enforce encryption and restrict anonymous access, ensuring compliance with hardening standards.

Quick Start

Use the proto-ftp skill to perform a passive configuration review and banner enumeration on the authorized host at 192.168.1.50.

Frequently Asked Questions about proto-ftp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an FTP security audit without triggering intrusive scans?

An FTP security audit can be conducted passively by safely identifying service versions and banners, evaluating TLS posture, and validating anonymous access settings without utilizing exploitation or brute-force techniques. This ensures non-destructive testing during configuration reviews.

What does passive FTP service discovery include during a pentest?

Passive FTP service discovery includes safely identifying FTP service versions and enumerating banners. It evaluates encryption verification and identifies vulnerabilities while maintaining strict adherence to scope, authorization, and non-destructive testing policies.

Can I check FTP anonymous access and TLS configuration safely?

Yes, you can check FTP anonymous access and TLS posture safely through a structured configuration review. This verifies if the server enforces encryption and restricts anonymous access, ensuring compliance with established security hardening standards.

Does an FTP configuration audit test for bounce attack vectors?

Yes, an FTP configuration audit evaluates potential bounce attack vectors against established security policies. It assesses the server's security posture to identify vulnerabilities while adhering strictly to authorization scope and non-destructive testing constraints.

When should I avoid brute-force techniques in FTP pentesting?

You should avoid brute-force techniques in FTP pentesting when conducting authorized security configuration reviews. The assessment framework requires vulnerability identification through passive discovery and encryption verification without utilizing exploitation or brute-force methods.