We can connect to FTP server through terminal by using command “ftp target address” as shown below. Ok, Since our target is running FTP service, let us first check if anonymous account is enabled on the server. So if any hacker is sniffing on your LAN, he can see the username and password in plain text. Another disadvantage with FTP is that it uses clear text authentication. Enabling anonymous account on FTP server is considered a high security risk especially if the account given not only read but also write permissions. But it a was courtesy to give your email address as password in those days. Anonymous download is a type of download where anyone can download the file by logging in with the username of “anonymous” and password as anything. Since FTP is used for sharing files, it has a option to enable anonymous downloads. It was quite popular as torrents now, only that FTP is a client-server architecture. Although not quite popular now, it was the most popular way of sharing files in yesteryears. As the name implies, it is used to share or transfer files. When we performed a scan with Nmap during scanning and enumeration stage, we have seen that ports 21,22,23 are open and running FTP, Telnet and SSH services respectively.įTP stands for File Transfer Protocol. We will do this by hacking FTP, telnet and SSH services. Before we perform further enumeration, let us see whether these credentials we acquired can help us in gaining access to the remote system. We have performed two types of enumeration till now.

Install mutillidae in parrot os