nuclei-templates/network/unauth-ftp.yaml

id: unauth-ftp

info:
  name: FTP Anonymous Login
  author: C3l3si4n
  severity: medium
  reference:
    - https://tools.ietf.org/html/rfc2577
  tags: network,ftp
  description: |
    Anonymous FTP access allows anyone to access your public_ftp folder, allowing unidentified visitors to download (and possibly upload) files on your website. Anonymous FTP creates the potential for a security hole for hackers and is not recommended.


network:
  - inputs:
      - data: "USER anonymous\r\nPASS nuclei\r\n"

    host:
      - "{{Host}}:21"
      - "{{Hostname}}"

    matchers:
      - type: word
        words:
          - "Anonymous access allowed,"
        part: response
Adding unauth-ftp 2021-03-11 07:10:27 +00:00			`id: unauth-ftp`

			`info:`
			`name: FTP Anonymous Login`
Updated author names 2021-06-09 12:20:56 +00:00			`author: C3l3si4n`
Adding unauth-ftp 2021-03-11 07:10:27 +00:00			`severity: medium`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`reference:`
			`- https://tools.ietf.org/html/rfc2577`
Adding unauth-ftp 2021-03-11 07:10:27 +00:00			`tags: network,ftp`
Update unauth-ftp.yaml 2022-08-16 16:26:33 +00:00			`description: \|`
			`Anonymous FTP access allows anyone to access your public_ftp folder, allowing unidentified visitors to download (and possibly upload) files on your website. Anonymous FTP creates the potential for a security hole for hackers and is not recommended.`
network script updates 2022-08-16 12:52:05 +00:00
Adding unauth-ftp 2021-03-11 07:10:27 +00:00
			`network:`
			`- inputs:`
			`- data: "USER anonymous\r\nPASS nuclei\r\n"`

			`host:`
fix: fixed network templates (#3306) 2021-12-09 13:06:24 +00:00			`- "{{Host}}:21"`
Handling ports in user input 2021-03-25 14:52:41 +00:00			`- "{{Hostname}}"`
Adding unauth-ftp 2021-03-11 07:10:27 +00:00
			`matchers:`
			`- type: word`
			`words:`
			`- "Anonymous access allowed,"`
Update unauth-ftp.yaml 2022-08-16 16:26:33 +00:00			`part: response`