File Transfer Protocol. A simple client server protocol for transfering a file over a network. Most operating system come with the client application. FTP provides no confidentiality or integrity to the data being trasfered.
Questions tagged [ftp]
130 questions
2
votes
3 answers
What is the purpose of opportunistic TLS (like STARTTLS)?
Opportunistic TLS refers to extensions in plain text communication protocols, which offer a way to upgrade a plain text connection to an encrypted (TLS or SSL) connection instead of using a separate port for encrypted communication...
Source:…
![](../../users/profiles/72031.webp)
Bob Ortiz
- 6,234
- 8
- 43
- 90
2
votes
1 answer
FTP session opened from an unknown IP
I have a website made in Magento and hosted on an Ubuntu server and since a few months have been registering FTP connections open from unknown IP trying to open the file lic.php. In the proftpd.log file I found this records:
FTP session…
![](../../users/profiles/136528.webp)
Hector Andres Rojas
- 123
- 3
2
votes
3 answers
What are the risks of using FTP?
Are the risks of using FTP essentially the same as the risks of using HTTP? That is my current understanding, and reading an answer (Risks of using HTTP when I trust the local network) on the topic seems to offer little help.
Let's say I am moving…
![](../../users/profiles/133087.webp)
VSO
- 523
- 1
- 5
- 10
2
votes
0 answers
How to exploit a file upload to an IIS 5.1
I found the following services in a testing environment:
21/tcp open ftp Microsoft ftpd
80/tcp open http Microsoft IIS httpd 5.1
The FTP server allows anonymous logins and the content can be displayed website.
How can this…
![](../../users/profiles/127732.webp)
SaAtomic
- 989
- 2
- 15
- 27
2
votes
2 answers
FTP client development - firewall issues
I am working on FTP client for internal usage for deployments. I have started out with WinSCP scripts, everything seems to be working fine, except one operation (deleting large(many files) directory containing files and sub-directories). I know that…
![](../../users/profiles/128881.webp)
Nerijus Dzinzeleta
- 21
- 2
2
votes
1 answer
Does SFTP cost more to implement than FTP?
This is a two part question.
How does the implementation of SFTP differ over FTP? (Account Creation, Setup of connection)
Is it more expensive (in terms of time/cost) to do so?
In this scenario I am using user credentials for authentication.
![](../../users/profiles/115932.webp)
Callum McCormick
- 49
- 5
2
votes
1 answer
Is storing passwords encrypted with GnuPGP on an anonymous FTP server safe?
I would like some advice on a method of storing passwords to a database on my anonymous FTP server.
Basically I have login details for a few trusted users to a database server stored in a text file encrypted with GnuPG. With it being encrypted I…
![](../../users/profiles/109293.webp)
Elliott Smelliott
- 23
- 2
2
votes
1 answer
Does FTPs (FTP over SSL using explicit TLS) support encryption of data channel?
I am exploring the ability of the FTPs(FTP over SSL using explicit TLS) to encrypt the data channel.
I read online that the secure data channel can be entered by entering the PROT command. PROT P for private.
Sorry if my question is too naive as I…
![](../../users/profiles/102318.webp)
Nicki
- 23
- 3
2
votes
3 answers
Limiting FTP privileges on Windows Server
I currently have a Windows 2012 Server which is acting as a webserver running IIS.
I am using Filezilla to host an FTP server to allow some clients FTP access to their own websites.
I have setup the FTP account with ease and they are able to access…
![](../../users/profiles/101600.webp)
Jimmy Jane
- 21
- 2
1
vote
1 answer
How to use the standard (non-dictionary) brute force attack on FTP in THC-Hydra?
In the process of attempting to secure my local LAN, I have determined that I am at little risk of a dictionary brute-force attack.
This being said, a standard brute-force attack which involves cycling through every possible password in existence is…
![](../../users/profiles/82738.webp)
user4493605
- 223
- 1
- 2
- 9
1
vote
2 answers
What negotiates SSL ciphers?
In light of the recent FREAK vulnerability I am trying to get a hold on what ciphers are being used by inbound connections. I have FTP tracing on which is giving me which ciphers are being negotiated between external clients and the system I am…
![](../../users/profiles/70146.webp)
Dude
- 11
- 2
1
vote
1 answer
FTP over SSL vs HTTPS implemention
Consider two implementations of SSL on a HTTP server and on an FTP server. With the same cipher suites used and the exact same protocols used.
Is one more secure than the other. I have heard that it is difficult to get FTP to downgrade protocols.…
![](../../users/profiles/67076.webp)
W Khan
- 75
- 1
- 6
1
vote
2 answers
Encrypt files on FTP server
I have a practical situation here, my company is a FTP server provider for some clients. The clients are sharing their files on our FTP server and have had no problem with access management and privacy policies so far.
Recently, our clients want to…
![](../../users/profiles/50133.webp)
A23149577
- 153
- 1
- 11
1
vote
4 answers
Protecting Password in Code
I am writing a program in Processing (which is basically java), that (amongst other things) downloads files from a FTP Server. To connect to the Server the program needs the correct FTP-password, which is currently saved as plain text in a String in…
![](../../users/profiles/54053.webp)
BigAl
- 11
- 3
1
vote
2 answers
How can I make a read-only filesystem read/write?
I recently hacked into my router which runs BusyBox v1.9.1. I want to edit some files in my web GUI interface which will allow me to get hidden options in it. I'm trying to edit a .js file and replace it via FileZilla (I also hacked FTP through…
![](../../users/profiles/50132.webp)
H3lp3ingth3p33ps
- 343
- 1
- 2
- 12