Skip to content

Commit a1765c9

Browse files
committed
Add KB for ftp_login
1 parent 9c1ae39 commit a1765c9

File tree

1 file changed

+59
-0
lines changed

1 file changed

+59
-0
lines changed
Lines changed: 59 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
## Description
2+
3+
This module will test FTP logins on a range of machines and report successful logins. If you have loaded a database plugin and connected to a database this module will record successful logins and hosts so you can track your access.
4+
5+
## Vulnerable Application
6+
7+
### Install ftp server on Kali Linux:
8+
9+
1. ```apt-get install vsftpd```
10+
2. Allow local users to log in and to allow ftp uploads by editing file /etc/vsftpd.conf uncommenting the following:
11+
```
12+
local_enable=YES
13+
write_enable=YES
14+
chroot_list_enable=YES
15+
chroot_list_file=/etc/vsftpd.chroot_list
16+
```
17+
3. Create the file /etc/vsftpd.chroot_list and add the local users you want allow to connect to FTP server. Start service and test connections:
18+
4. ```service vsftpd start```
19+
20+
### Installing FTP for IIS 7.5 in Windows:
21+
22+
#### IIS 7.5 for Windows Server 2008 R2:
23+
24+
1. On the taskbar, click Start, point to Administrative Tools, and then click Server Manager.
25+
2. In the Server Manager hierarchy pane, expand Roles, and then click Web Server (IIS).
26+
3. In the Web Server (IIS) pane, scroll to the Role Services section, and then click Add Role Services.
27+
4. On the Select Role Services page of the Add Role Services Wizard, expand FTP Server.
28+
5. Select FTP Service. (Note: To support ASP.NET Membership or IIS Manager authentication for the FTP service, you will also need to select FTP Extensibility.)
29+
6. Click Next.
30+
7. On the Confirm Installation Selections page, click Install.
31+
8. On the Results page, click Close.
32+
33+
#### IIS 7.5 for Windows 7:
34+
35+
1. On the taskbar, click Start, and then click Control Panel.
36+
2. In Control Panel, click Programs and Features, and then click Turn Windows Features on or off.
37+
3. Expand Internet Information Services, then FTP Server.
38+
4. Select FTP Service. (Note: To support ASP.NET Membership or IIS Manager authentication for the FTP service, you will also need to select FTP Extensibility.)
39+
5. Click OK.
40+
41+
## Verification Steps
42+
43+
1. Do: ```use auxiliary/scanner/ftp/anonymous```
44+
2. Do: ```set RHOSTS [IP]```
45+
3. Do: ```set RPORT [IP]```
46+
4. Do: ```run```
47+
## Sample Output
48+
```
49+
msf> use auxiliary/scanner/ftp/ftp_login
50+
msf auxiliary(ftp_login) > set RHOSTS ftp.openbsd.org
51+
msf auxiliary(ftp_login) > set USERNAME ftp
52+
msf auxiliary(ftp_login) > set PASSWORD [email protected]
53+
msf auxiliary(ftp_login) > run
54+
[*] 129.128.5.191:21 - Starting FTP login sweep
55+
[+] 129.128.5.191:21 - LOGIN SUCCESSFUL: ftp:[email protected]
56+
[*] Scanned 1 of 1 hosts (100% complete)
57+
[*] Auxiliary module execution completed
58+
msf auxiliary(ftp_login) >
59+
```

0 commit comments

Comments
 (0)