21 - FTP

Usage

FTP operates in two modes for data transfer:

• In active mode, the client opens a port and listens while the server connects back to the client to transfer data.

• In passive mode, the server opens a port and the client initiates the connection, which helps navigate firewalls or NAT restrictions more easily.

FTP also supports two data transfer types:

• Binary mode transfers files byte-for-byte, preserving exact file contents, which is essential for non-text files like images or executables.

• ASCII mode converts line endings and text formatting to match the target system, suitable for plain text files but potentially corrupting binary data.

Connect

# Connect to FTP server
ftp <target>

# No auto login (useful for scripts)
ftp -n <targetp> 

# Verbose mode         
ftp -v <target>          

# Log in as a specific user
ftp <user>@<target>

Banner Grabbing

Basic Commands

Enumeration

Transfer

Attacks

Anon

Sometimes are configured to accept passwordless anonymous and/or default logins:

ftp ftp@<server-ip>
ftp anonymous@<server-ip>

BFA

Vulnerability Recon

File Exfil

Applications

FileZilla

FileZilla is a cross-platform FTP, FTPS, and SFTP client and server application that enables the transfer of files between local systems and remote servers. The client provides a graphical interface for managing file uploads and downloads, directory navigation, and permissions, while the server component allows administrators to configure user accounts, access controls, and transfer policies. Security features include support for secure protocols (FTPS and SFTP) to protect credentials and data in transit, as well as configurable logging and IP-based access restrictions.

Password Files

FileZilla passwords are stored in the recentservers.xml file, typically, in a base64-encoded format:

type C:\Users\x7331\AppData\Roaming\FileZilla\recentservers.xml