‫Now, as you probably already know, file transfer protocol, or FTP, is used for the transfer of files
‫between a client and a server using Port 21.
‫Poorly configured FTP servers can be a good foothold.
‫So you can run some MSF modules to enumerate FTP servers and gain some important information, such
‫as software version, banner info and all that.
‫Aside from that.
‫The FTP servers authenticate users with a clear text sign in mechanism.
‫Moreover, it can sometimes allow anonymous login.
‫So why don't we enumerate an FTP service?
‫So let's have a look and see which hosts have FTP services.
‫All right, so both of them have.
‫But sometimes administrators use different ports for the services, so let's try a search with the best
‫parameter.
‫And just like that, you can find all the FTP servers that DB and MAP Command discovered.
‫And yes, as you see here, there's an active service running on 21 21.
‫And then you'll get this list if you search for FTP auxiliaries.
‫And I'll just use these ones here.
‫Use auxiliary scanner FTP and F.T. version module show options.
‫I think he said.
‫So let's run the module.
‫And as a result.
‫Now, you can do the same process for every FTP board.
‫But here's an important point, if you get the version, look for vulnerabilities on the Internet or
‫somewhere else.
‫So what I'll do is I'll copy and then search Google or whatever your favorite search engine is.
‫And you see these FDP has a vulnerability for this particular version and even Métis Point as a model
‫for this.
‫So make a note of that, because you will use it later.
‫Oh, and by the way, this is a lab environment, remember, but the logic is 100 percent the same as
‫in any real penetration testing.
‫So I'll use another module.
‫FTP.
‫Log in.
‫Showing options and here are the final variables.
‫So I'm going to allow blank passwords.
‫And username as password.
‫And here on set user parse file to my FTP dictionary file.
‫I'll create this list from the same address that I did for my ask school.
‫All right.
‫Run the module.
‫And I think you'll probably find one bear, so make a note of that to.
‫Now, one more module.
‫Some FTP modules allow for anonymous logins.
‫So when you perform a vulnerability scan, you probably are going to get this finding.
‫But you can quickly check to see if any of his covered FTP services allowances.
‫That's why this module is so handy.
‫So options.
‫OK, so I'll need to configure nothing, so I'll just run the module.
‫And the result comes up pretty quickly, so, yeah, you can connect this FTP service on Métis voidable
‫to anonymously.
‫So now that we got the hang of that, let's enumerate some other services.