FTP

The HTTP module is based on the original zgrab grabber.

Flags

• BaseFlags
• TLSFlags
• --authtls: if present, attempt AUTH TLS or AUTH SSL and do a TLS handshake after grabbing the normal banner.

Scan

1. Read the banner sent by the server after connecting, of the form '200 OK\r\n'
2. If --authtls is set, send AUTH TLS (and if that fails, AUTH SSL), then do a TLS handshake, and collect the certificates etc.

Output

• banner: The banner sent by the server upon connecting (e.g. '220 (FTPD 1.2.3)\r\n')
• auth_tls: The response from the AUTH TLS command, if --authtls was sent.
• auth_ssl: The response from the AUTH SSL command, if --authtls was sent and AUTH TLS failed.
• tls: The TLS logs (see TLSFlags)