FTP


Nmap discovered a FTP server on the target port 21 The running service is vsftpd 3.0.2

Null Session


┌──(kali㉿kali)-[~/PEN-200/PG_PRACTICE/sybaris]
└─$ ftp ftp@$IP                    
Connected to 192.168.185.93.
220 (vsFTPd 3.0.2)
331 Please specify the password.
Password: 
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> 

The target FTP server allows anonymous access

ftp> ls -la
229 Entering Extended Passive Mode (|||10093|).
150 Here comes the directory listing.
drwxr-xr-x    3 0        0              17 Sep 04  2020 .
drwxr-xr-x    3 0        0              17 Sep 04  2020 ..
drwxrwxrwx    2 0        0               6 Apr 01  2020 pub
226 Directory send OK.

There is a directory; /pub/

ftp> cd pub
250 Directory successfully changed.
ftp> ls -la
229 Entering Extended Passive Mode (|||10099|).
150 Here comes the directory listing.
drwxrwxrwx    2 0        0               6 Apr 01  2020 .
drwxr-xr-x    3 0        0              17 Sep 04  2020 ..
226 Directory send OK.

It’s empty

local: test remote: test
229 Entering Extended Passive Mode (|||10091|).
150 Ok to send data.
     0        0.00 KiB/s 
226 Transfer complete.
 
ftp> ls -la
229 Entering Extended Passive Mode (|||10094|).
150 Here comes the directory listing.
drwxrwxrwx    2 0        0              18 Mar 29 10:34 .
drwxr-xr-x    3 0        0              17 Sep 04  2020 ..
-rw-rw-rw-    1 14       50              0 Mar 29 10:34 test
226 Directory send OK.

Write access is granted