Original subtitles

[LOGO AUDIO]

Now that we've got an idea how FTP works,

let's look at some default configurations that we normally

take advantage of.

And it's easy, low-hanging fruit.

We're RVM, let's check our IP address with an IPA.

Our address is 192.13.191.2, so our victim

is going to be the .3.

We'll make sure that it's up with a ping.

Ping 192.13.191.3.

We're getting good replies, so it is up.

Let's scan it.

And we've got port 21 open.

We can add in a port 21 services can.

And it's VSFTPD, which doesn't much matter.

The last one was ProFTPD.

And we'll get into what all these versions mean later.

But for now we just know that it's running that software.

What we really want to find out is if there's

a vulnerability in this one.

And FTP ANON is fairly common, anonymous login.

We tried looking for it in the last one.

So look here.

And it says anonymous FTP Login is allowed.

And it even says that they have Read access

and some Execute access to this pub.

So then let's check it out.

FTP.

The IP address .3.

And how you get in is anonymous.

And then hit Enter when it asks for the password.

And it says login successful.

We can run an LS.

And this script that we ran before, all it did

was log in, try anonymous, and then run an LS

and see what happened.

Report back.

So now we've done all those things ourselves.

Anonymous login works.

We could GET flag.

It sent it across.

Say bye to FTP.

CAT the flag.

And it worked.

That's really all there is to that one.

Anonymous FTP login is an old thing

because it used to be, hey, if they couldn't

get into our network, then it doesn't

matter if we've got passwords on these shares,

or passwords on our FTP, because we've got a firewall.

And we've got routers.

And we'll catch them before they get in.

Well what if they get in and you don't have segmentation,

and you don't have proper configurations on all

of your servers?

This happens.