File Transfer Protocol. A simple client server protocol for transfering a file over a network. Most operating system come with the client application. FTP provides no confidentiality or integrity to the data being trasfered.

learn more… | top users | synonyms

1
vote
0answers
24 views

How does SFTP work? Please help someone [migrated]

We run a system that automatically sends a swift message at the end of a process. But this messages are sent using FTP. We feel the FTP process is too prone to MITMA and wish to change the sending ...
-1
votes
0answers
55 views

Why would I need to check data integrity after sending file over ftp, sftp or ftps? [migrated]

I need to transfer some files from remote computer and I plan to do it via FTP (or SFTP or FTPS). Apparently, FTP is based on TCP protocol and if I remember well my lessons the difference between TCP ...
0
votes
0answers
44 views

How to block ftp password guessers in shared hosting?

Is this also possible for shared hosting to: 1.use a web software to block password guessing attempts 2.change ftp port 3.locking down access to specific source IP addresses If none of above is ...
1
vote
1answer
30 views

Is authorisation of FTP safe against sniffing and vulnerable to man-in-the-middle hijacking?

One of my hosting providers still just offers FTP access to the server... Is authorisation safe (i.e. resistant to network sniffing) despite the content of the transmission is plain text? Is it ...
0
votes
1answer
46 views

FTP access instead of SFTP [duplicate]

We want to provide access to upload files on a FTP server. How to provide the access for the same? What is difference between a FTP and SFTP server?
2
votes
1answer
82 views

Is storing passwords encrypted with GnuPGP on an anonymous FTP server safe?

I would like some advice on a method of storing passwords to a database on my anonymous FTP server. Basically I have login details for a few trusted users to a database server stored in a text file ...
62
votes
5answers
5k views

Does FTPS (FTP+S) offer better security than SFTP on the server side?

I had an exchange with some third party sysadmin yesterday regarding the setup of a file transfer interface between our servers. I suggested using SFTP because our application has good support for it....
3
votes
3answers
112 views

Is SFTP vulnerable to brute force, bounce, spoof, sniffing and port stealing?

I have been researching FTP and noted that using FTP means you are vulnerable to these types of attacks. I have been looking for an safer alternative and came across SFTP. Is SFTP still vulnerable to ...
3
votes
2answers
150 views

Setting up SFTP at Production Server is a Risk?

There is a requirement to setup a SFTP server. This will be used by some of user b2b agents to upload files. Such kind of setup is always doubtfully risky in production environment where user can ...
2
votes
1answer
65 views

Does FTPs (FTP over SSL using explicit TLS) support encryption of data channel?

I am exploring the ability of the FTPs(FTP over SSL using explicit TLS) to encrypt the data channel. I read online that the secure data channel can be entered by entering the PROT command. PROT P for ...
2
votes
2answers
120 views

Limiting FTP privileges on Windows Server

I currently have a Windows 2012 Server which is acting as a webserver running IIS. I am using Filezilla to host an FTP server to allow some clients FTP access to their own websites. I have setup the ...
2
votes
6answers
2k views

When is it safe to use a web based FTP client?

Is it safe to use a web based FTP client? If so, when? What should I watch out for?
0
votes
0answers
51 views

script for analysis of tcpdump log file

I'm trying to get the following metrics from my tcpdump log file: (1) one-way delay, (2) request/response delay, (3) packet loss, (4) overall transaction duration and (5) delay variation (jitter). ...
1
vote
0answers
23 views

Is Sublime plugin FTPSync secure?

I use Firefox plugin FireFTP which stores FTP credentials in encrypted files. Sublime plugin FTPSync seems to store FTP credentials in a regular file. Does that make it unsafe to use?
12
votes
1answer
2k views

Does ISO 27001 allow a company to use FTP?

On a project I had to use unsecured FTP to connect to the hosting provider - not SFTP, not FTPS. The hosting provider proudly claims it's ISO 27001 certified. Somehow this all seemed quite wrong to me....
0
votes
1answer
109 views

What is the difference between FTP Brute force with hydra and Metasploit? [closed]

What is the difference between FTP Brute force with hydra and and FTP brute force with Metasploit ?
1
vote
1answer
153 views

WordPress is asking for my FTP password to update. Is this official behavior or am I compromised?

I'm running a personal WordPress server and I have 3 pending updates: WP update from 4.2.2 to 4.3.1. Akismet plugin update to 3.1.5 which addresses XSS issues. Twenty-fifteen theme update. For ...
1
vote
1answer
478 views

How to use the standard (non-dictionary) brute force attack on FTP in THC-Hydra?

In the process of attempting to secure my local LAN, I have determined that I am at little risk of a dictionary brute-force attack. This being said, a standard brute-force attack which involves ...
1
vote
3answers
254 views

Unencrypted FTP to transfer encrypted data - okay if IP-restricted?

If unencrypted FTP over the public internet is the only file transfer option for a particular situation, what security concerns are applicable assuming: The data being transferred is strongly ...
2
votes
2answers
75 views

Is a server which FTP credentials were kept in a machine with Firefox being used compromised after the latest firefox vulnerability?

Since the vulnerability was specifically targeting FTP passwords in Windows machines there were used with things like Filezilla, can a server which SFTP credentials were kept in a windows machine ...
1
vote
1answer
84 views

FireFTP security [closed]

I've just installed the FireFTP plugin for Firefox, I have been using Adobe Dreamweaver's FTP up to now but wanted to try something different. When I opened it up and saw all of my computer's files ...
12
votes
3answers
2k views

FTP hacked, planted file [closed]

Can anyone help me to understand what this does? Someone has planted a file with this piece of code on my server.It is shortened because it cannot fit the question, but just to have some idea what ...
1
vote
2answers
281 views

What negotiates SSL ciphers? [duplicate]

In light of the recent FREAK vulnerability I am trying to get a hold on what ciphers are being used by inbound connections. I have FTP tracing on which is giving me which ciphers are being negotiated ...
4
votes
1answer
134 views

Android app using FTP

I have done some android programming (self taught). I have started working on an app idea. The idea is pretty much that people with the app installed can post pictures/videos and text which can be ...
3
votes
2answers
411 views

How to secure a network (FTP connections) from sniffers

I'm actually working in a medium sized company with security concerns. Let me explain you my problem : The context: My office has one single internet line. This line is accessed by anyone in the ...
4
votes
3answers
965 views

Does FTP provide any type of integrity?

To verify, that the files I have downloaded using it are not corrupted.
1
vote
1answer
597 views

FTP over SSL vs HTTPS implemention

Consider two implementations of SSL on a HTTP server and on an FTP server. With the same cipher suites used and the exact same protocols used. Is one more secure than the other. I have heard that it ...
0
votes
1answer
196 views

What to do against continuous FTP attack

I have a server (windows 2008) and this server uses WebsitePanel to host some websites. I tried to setup Mozilla FTP server, but I cannot get this to work. As I do not use it I do not mind. However ...
1
vote
1answer
5k views

SFTP or FTP through VPN?

I'm struggling to find out whether or not I should set up SFTP since I already connect to the internet using a secure VPN. Is the security using FTP through a VPN (using OpenVPN, more specifically ...
1
vote
2answers
1k views

Encrypt files on FTP server

I have a practical situation here, my company is a FTP server provider for some clients. The clients are sharing their files on our FTP server and have had no problem with access management and ...
2
votes
2answers
137 views

Who can actually see the password when I accidentally used ftp instead of sftp?

It has been said that if we accidentally use ftp instead of sftp, people can actually see the login name and password in pure text form, and it is very bad. But who can actually see it? Will it be ...
0
votes
1answer
74 views

Period and direction of risk when connecting to malicious webserver

Please forgive my terminology mishaps. Recently, I tried to connect to a server over SFTP. The SSH public key response differed by 1 byte to what I was expecting, from an info page. I was tempted to ...
1
vote
4answers
528 views

Protecting Password in Code

I am writing a program in Processing (which is basically java), that (amongst other things) downloads files from a FTP Server. To connect to the Server the program needs the correct FTP-password, ...
31
votes
8answers
18k views

Is it safe to store passwords on Google drive?

In the past I have seen having a Google drive document and have FTP username/passwords there. Is storing passwords in Google drive a good practice?
1
vote
2answers
6k views

How can I make a read-only filesystem read/write?

I recently hacked into my router which runs BusyBox v1.9.1. I want to edit some files in my web GUI interface which will allow me to get hidden options in it. I'm trying to edit a .js file and replace ...
0
votes
1answer
911 views

SElinux security context public_content_t for vsftpd

My understanding of SElinux context public_content_t is as public_content_t is required for files shared via a FTP server unless associated with a user home directory Here is my question Does user ...
2
votes
1answer
144 views

vsftpd metasploit evidence in logs?

We have a public ftp server that is being probed by the usual Chinese brute-force scans. They are probing vsftpd. Notmally a failed login to vsftpd looks like this in syslog: Mar 17 15:56:07 ...
0
votes
1answer
425 views

Access an ftp server gives me the passwd file though no shadow

I have gain access to a server via ftp which is showing me the passwd file with 2 users via ftp://1.2.3.4/../etc/passwd output is: root:*:0:0:root:: ftp:*:109:117:Anonymous FTP:: As such the ...
0
votes
4answers
281 views

How to secure my website's FTP?

When I opened ftp command prompt and typed open mydomain.com, it gave me the following and I think that this is a security vulnerable. connected to mydomain.com. 220----- Welcome to Pure-FTPd [...
0
votes
1answer
2k views

How to use an OR condition with the content of a snort rule

I understand that if you specify multiple contents then the rule triggers only if ALL the content conditions are satisfied. But I want to create a rule that will trigger even if any one of the ...
9
votes
4answers
555 views

Should I tunnel multiple TCP connections through a TLS/SSL tunnel or use TLS/SSL for each connection?

I am developing an application that runs on Windows PCs. The application is able to connect to some kind of devices within a LAN. It can create multiple TCP-connections to the device it is connected ...
1
vote
2answers
325 views

Securing multiple connections with different protocols all together

I need to secure the communication between an application (runs on any PC and has been designed for Windows) and an external device (runs on UNIX). The application is running on Windows while the ...
0
votes
1answer
206 views

vsftp encryption algorithm

I want to configure VSFTP for ftps protocol and it has some choices to select the encryption type: tlsv1, sslv2, sslv3. I read that tls version 1 has some security issues but in the man page it says ...
0
votes
1answer
295 views

Website Link Spam Hacking Protection [closed]

I've recently been employed as a junior web and software developer for a small company, and noticed that their Home page has had links to completely unrelated sites added like spam to the index.html ...
2
votes
3answers
173 views

A scammer placed a remote file on a Wordpress website?

A previous developer I have used has got upset and start compromising the files of my website on daily bases (such as changing the index of the site with weird messages, deleting the .htaccess, ...
6
votes
1answer
285 views

SFTP or FTPS for connecting to a VPS?

I'm going to be hosting one of my websites on a VPS soon and I want to make it as secure as possible. Only I will need access to the VPS, and I can't see that changing in the near future. Because it ...
24
votes
7answers
17k views

Should I use FileZilla?

Recently, an increasing number of people have started advising moving away from FileZilla. However, the only reason I can see for this is that FileZilla stores the connection information in a ...
0
votes
1answer
357 views

Allow read-only access to server-side pages for security review?

This answer: http://security.stackexchange.com/a/37319/10574 Mentions the issue of host-based security. To the end user, the web server is an untrustable black box. Would it provide to needed ...
3
votes
1answer
579 views

What is the danger of the “FTP RNFR ././ attempt”?

I am analysing an old attack and I got a scenario which does not really make sense to me. The attacker connects to the ftp service and runs a bunch "FTP RNFR ././ attempt". This is caught by snort as ...
3
votes
1answer
1k views

How safe is FireFTP?

After a bad experience with FTP credentials hacking I decided to start using SFTP and stop having FTP credentials stored in clear on my computer (Filezilla). I now use FireFTP which encrypts ...