File Transfer Protocol. A simple client server protocol for transfering a file over a network. Most operating system come with the client application. FTP provides no confidentiality or integrity to the data being trasfered.

learn more… | top users | synonyms

1
vote
1answer
983 views

Script injection on different hosting servers = FTP hacking?

I've been seeing the exact same injected script on several of my websites for the last few weeks. Today I realize these websites don't share the same hosting servers, yet the attacks (1) started at ...
-2
votes
3answers
3k views

How does Google get information about FTP servers - and how to avoid it?

I searched the internet like this inurl:ftp -inurl:(http|https). I found many FTP hosts. I can add or remove files from some hosts. How does Google get information about FTP servers? How can one avoid ...
5
votes
1answer
1k views

How to fuzz on FreeFloat FTP server using SPIKE Fuzzing?

I would to seek help on using SPIKE fuzzer to fuzz an FTP server which I am testing on Freefloat FTP server but do not have idea on how to work on. As I research and tested out many different types of ...
17
votes
5answers
15k views

Can https be used instead of sftp for secure file transfers?

My company works with financials, and we are required to transfer files containing non-public consumer information securely between our company and our clients. The usual solution is to go with sftp ...
13
votes
3answers
36k views

Good Practices to secure FTP access

We have several web applications (B2B, B2C eCommerce). Where developers have access to upload files. I need to ensure FTP part is Secure enough. What practices / steps should I follow? Now I do, ...
1
vote
1answer
3k views

Nmap port scan and FTP bounce

Suppose that there is a network of machines, and there is a server with ftp server that allows ftp bounce. I do a nmap scan on the network nmap -sC -some other parameters network address. Does nmap ...
2
votes
0answers
2k views

Hack scenario when a person has a non-superuser shell [closed]

Suppose that there are following three machines in the network: Machine A: Microsoft Server 2003 Service Pack 2 FileZilla 0.9.29 beta ftp server (TCP 21) Mcafee ePolicy server (81), remote desktop ...
3
votes
1answer
364 views

How to forward an specific FTP User to a Honeypot?

What I'm trying to do is to forward a specific FTP-User to a Honeypot, because the main server is for Shared Hosting and there's a lot of traffic, and I don't want to spend all the resources in ...
4
votes
2answers
2k views

Should your client SSL Trusted Authority contain only root and intermediate certificates?

I'm getting conflicting information and it seems people are using certificates a little differently depending on how much effort they want to expend in managing them, and maybe the application being ...
1
vote
1answer
2k views

Is the ftp server insecure, or someone is sniffing our ftp passwords?

Some of the sites that I work with was compromised a while ago, I requested the FTP logs from the hosting company and they provided me with this: ftp.somesite.com 64.29.xxx.xxx 87.236.xxx.xxx[09/Jul/...
2
votes
2answers
19k views

known public exploits for vsftpd 2.0.1/2.0.5

I somehow noticed that there were numerous reports of security vulnerabilities of vsftpd 2.0.1~2.0.5; however, there just seems to be no public exploits. The server I am working on has vsftpd 2.0.5 (...
3
votes
2answers
246 views

Ftp constantly asked for a .exe file, what can i do?

I rent a web server ("service") at a web hosting site which recently i assume got hacked but i am unsure how... I know it got hacked because recently out of the blue certain files and folder appeared ...
0
votes
1answer
670 views

website hacked and all its content erased despite the protections

i was hacked by a guy who erased everything. I spent the day to put everything in order, and i would like to find a solution for this : he erased all the files, and also changed the title for "www" in ...
11
votes
5answers
4k views

Is it worth the effort to store FTP passwords encrypted?

I have a project to build a system that needs to push files to multiple third-party FTP servers. I have asked these third parties to provide a more secure interface; all have declined. So now I have ...
4
votes
1answer
178 views

Sulley - only using ASCII printable characters

I have a problem fuzzing FTP protocol. An example of a command fuzzed is the following data model, which should fuzz the "CWD [string]" command of the FTP protocol. s_initialize('CWD') s_static('CWD')...
7
votes
1answer
574 views

Sulley - optional element and command check

I'm currently using Sulley to fuzz my FTP server, but I'm having problems. I want to specify the STRU command, which has a syntax: STRU [<SP> F|R|P] <CRLF> I tried to specify the ...
2
votes
2answers
4k views

Anonymous FTP Risks

If my IIS 6.0 web server is disabled and the only other service running is FTP, what are the security risks of allowing anonymous FTP read/write, considering that a random person couldn't use any sort ...
0
votes
2answers
4k views

How can I prevent my FTP from being hacked?

My FTP was hacked, a file has been uploaded and the host suspended the website temporarily. I'm only using an admin page that points to an .xml file (to load and modify the text of my website). I don'...
10
votes
4answers
476 views

If I try to log into the wrong host with FTP do they now have my credentials?

Say I make a typo in the host name. Are my credentials now somewhere in the wrong hosts server log? Should I go about changing my credentials just in case now?
5
votes
3answers
809 views

How can I restrict users' connection attempts to my FTP server?

Is there any way possible to restrict user to make a connection to the FTP server on my Windows XP computer? I have an FTP server established in Windows XP and now I want to make access to that FTP ...
0
votes
1answer
2k views

windows security alert windows firewall has blocked some features of this program message coming for every new build of my application

I made an application which uses ftp so windows shows windows security alert windows firewall has blocked some features of this program message for every new version of my application any idea how to ...
0
votes
1answer
482 views

Iframe hack / done through FTP?

On two websites which I host for a friend, I found that there is an iframe at the bottom of each site's index.htm file. <iframe src="http://www.kunstsalen.dk" width=1 height=1 style="visibility: ...
2
votes
2answers
1k views

Some questions about penetration testing distribution Backtrack 5

I know just the basics of backtrack and I want to ask some questions about it: Can you attack an ftp server using backtrack? an email server? I have a Centos virtual private server and backtrack is ...
14
votes
3answers
4k views

Bruteforce attack on my FTP server

I recently setup VSFTPD on my personal server for sharing files over FTP. In the vsftpd.log file, i see hundreds of failed attempts to login with usernames like "adminitrator" , "adminitrator1", "...
5
votes
1answer
2k views

What is the value of encrypting a payload when it will be transferred over sftp anyway?

We have a integration arrangement to send content across the internet and the agreed protocol encrypts then sends it via sftp. What possible reason coould there be to encrypt the content twice? I ...
16
votes
1answer
5k views

SFTP, FTPS and SecureFTP differences and security implications

What are the basic differences and security implications of using SFTP, FTPS and SecureFTP.