id: unauth-ftp

info:
  name: FTP Anonymous Login
  author: C3l3si4n
  severity: medium
  reference:
    - https://tools.ietf.org/html/rfc2577
  tags: network,ftp

network:
  - inputs:
      - data: "USER anonymous\r\nPASS nuclei\r\n"

    host:
      - "{{Host}}:21"
      - "{{Hostname}}"

    matchers:
      - type: word
        words:
          - "Anonymous access allowed,"
        part: response