id: unauth-ftp

info:
  name: FTP Anonymous Login
  author: Celesian ( @C3l3si4n )
  severity: medium
  reference: https://tools.ietf.org/html/rfc2577
  tags: network,ftp

network:
  - inputs:
      - data: "USER anonymous\r\nPASS nuclei\r\n"

    host:
      - "{{Hostname}}:21"

    matchers:
      - type: word
        words:
          - "Anonymous access allowed,"
        part: all