Home page logo
/

nmap-dev logo Nmap Development mailing list archives

FTP Anon Inquiry (Writeable Directory)
From: Zack Dela <ny101880 () yahoo com>
Date: Thu, 14 Apr 2011 00:21:48 -0700 (PDT)

Hi Ange,

I tried using the FTP anon (nmap 5.51 version) script and I found a directory 
that is writable in one of our sites

Here is the example Below:
21/tcp open  ftp     syn-ack
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
| drw-rw-rw-   1 user     group           0 Mar 22 12:34 . [NSE: writeable]
| drw-rw-rw-   1 user     group           0 Mar 22 12:34 .. [NSE: writeable]
| dr--r--r--       1 user     group           0 Mar 25 11:14 NetworkFolder
|_drw-rw-rw-  1 user     group           0 Apr 13 05:47  TestFolder [NSE: 
writeable]


I believe we can do something on the "drw-rw-rw-   1 user     group           0 
Apr 13 05:47 TestFolder [NSE: writeable]"

I browse to the TestFolder directory and able to view the files.

My question is, how can I tell that its writeable? Can I add files to that 
folder since it writeable?

Thank you for the explanation

Cheers...

Zack
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault