mailing list archives
FTP Anon Inquiry (Writeable Directory)
From: Zack Dela <ny101880 () yahoo com>
Date: Thu, 14 Apr 2011 00:21:48 -0700 (PDT)
I tried using the FTP anon (nmap 5.51 version) script and I found a directory
that is writable in one of our sites
Here is the example Below:
21/tcp open ftp syn-ack
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
| drw-rw-rw- 1 user group 0 Mar 22 12:34 . [NSE: writeable]
| drw-rw-rw- 1 user group 0 Mar 22 12:34 .. [NSE: writeable]
| dr--r--r-- 1 user group 0 Mar 25 11:14 NetworkFolder
|_drw-rw-rw- 1 user group 0 Apr 13 05:47 TestFolder [NSE:
I believe we can do something on the "drw-rw-rw- 1 user group 0
Apr 13 05:47 TestFolder [NSE: writeable]"
I browse to the TestFolder directory and able to view the files.
My question is, how can I tell that its writeable? Can I add files to that
folder since it writeable?
Thank you for the explanation
Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/
- FTP Anon Inquiry (Writeable Directory) Zack Dela (Apr 14)