- [Man] Now let's go over how to exploit
FTP real vulnerabilities and FTP insecure implementations.
The legacy FTP protocol doesn't even encrypt
or perform any type of integrity validation.
So it is recommended that you actually use
a more secure alternative like the
File Transfer Protocol secure
or FTPS or the Secure File Transfer Protocol
otherwise known as SFTP.
Now the SFTP and FTPS protocols,
they do use encryption to protect data,
however some implementations use
very weak encryptions ciphers
or encryption algorithms like Blowfish and the DES protocol.
You should definitely use stronger algorithms
like AES like for example.
Now also, SFTP and FTP servers use hashing algorithm
to verify the integrity of the file transmission.
Another thing that I want to highlight
is that actually secure FTP uses SSH
and FTPS basically using FTP over TLS.
Now in the past, a lot of people actually configure the
SMTP servers to enable anonymous user authentication.
And in this case actually, an attacker
definitely can use that to store
unwanted files in your server,
or for potentially, also steal information
that people may actually put in those directories.
For example, let's say you're an attacker
who compromises a system
and then extracts sensitive information,
then you can actually store that information
and in FTP server that is configured for in an
anonymous user authentication,
and then you can use that as a stepping stone
to then even export that data somewhere else
or maybe actually that you're hosting malware right?
And then malware can be propagated that way as well.
Now here I'm using actually End map to determine the type
of version of an SFTP server
and of course as you can actually see it in the screen.
You can also use Metasploit
and use the accelerator scanner FTP anonymous
to actually just basically try to see if the server
is configured for anonymous login.