Skip to content

Commit 323650d

Browse files
committed
land rapid7#8284 docs for ftp_version
2 parents 5476f60 + 4c71a99 commit 323650d

File tree

1 file changed

+80
-0
lines changed

1 file changed

+80
-0
lines changed
Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
## Description
2+
3+
This module allows us to scan through a series of IP Addresses and provide details about the version of ftp running on that address.
4+
5+
## Vulnerable Application
6+
7+
### Install ftp server on Kali Linux:
8+
9+
1. ```apt-get install vsftpd```
10+
2. Allow local users to log in and to allow ftp uploads by editing file `/etc/vsftpd.conf` uncommenting the following:
11+
12+
```
13+
local_enable=YES
14+
write_enable=YES
15+
chroot_list_enable=YES
16+
chroot_list_file=/etc/vsftpd.chroot_list
17+
```
18+
19+
3. Create the file `/etc/vsftpd.chroot_list` and add the local users you want allow to connect to FTP server. Start service and test connections:
20+
4. ```service vsftpd start```
21+
22+
### Installing FTP for IIS 7.5 in Windows:
23+
24+
#### IIS 7.5 for Windows Server 2008 R2:
25+
26+
1. On the taskbar, click Start, point to Administrative Tools, and then click Server Manager.
27+
2. In the Server Manager hierarchy pane, expand Roles, and then click Web Server (IIS).
28+
3. In the Web Server (IIS) pane, scroll to the Role Services section, and then click Add Role Services.
29+
4. On the Select Role Services page of the Add Role Services Wizard, expand FTP Server.
30+
5. Select FTP Service. (Note: To support ASP.NET Membership or IIS Manager authentication for the FTP service, you will also need to select FTP Extensibility.)
31+
6. Click Next.
32+
7. On the Confirm Installation Selections page, click Install.
33+
8. On the Results page, click Close.
34+
35+
#### IIS 7.5 for Windows 7:
36+
37+
1. On the taskbar, click Start, and then click Control Panel.
38+
2. In Control Panel, click Programs and Features, and then click Turn Windows Features on or off.
39+
3. Expand Internet Information Services, then FTP Server.
40+
4. Select FTP Service. (Note: To support ASP.NET Membership or IIS Manager authentication for the FTP service, you will also need to select FTP Extensibility.)
41+
5. Click OK.
42+
43+
## Verification Steps
44+
45+
1. Do: ```use auxiliary/scanner/ftp/ftp_version```
46+
2. Do: ```set RHOSTS [IP]```
47+
3. Do: ```set RPORT [IP]```
48+
4. Do: ```run```
49+
50+
## Sample Output
51+
52+
### On vsFTPd 3.0.3 on Kali
53+
54+
```
55+
msf > use auxiliary/scanner/ftp/ftp_version
56+
msf auxiliary(ftp_version) > set RHOSTS 127.0.0.1
57+
RHOSTS => 127.0.0.1
58+
msf auxiliary(ftp_version) > set RPORT 21
59+
RPORT => 21
60+
msf auxiliary(ftp_version) > exploit
61+
62+
[*] 127.0.0.1:21 - FTP Banner: '220 (vsFTPd 3.0.3)\x0d\x0a'
63+
[*] Scanned 1 of 1 hosts (100% complete)
64+
[*] Auxiliary module execution completed
65+
msf auxiliary(ftp_version) >
66+
```
67+
## Confirming using NMAP
68+
```
69+
root@kali:~# nmap -sV 127.0.0.1 -p21
70+
71+
Starting Nmap 7.40SVN ( https://nmap.org ) at 2017-04-24 23:11 IST
72+
Nmap scan report for localhost (127.0.0.1)
73+
Host is up (0.000035s latency).
74+
PORT STATE SERVICE VERSION
75+
21/tcp open ftp vsftpd 3.0.3
76+
Service Info: OS: Unix
77+
78+
root@kali:~#
79+
80+
```

0 commit comments

Comments
 (0)