IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [ftp]

File Transfer Protocol. A simple client server protocol for transfering a file over a network. Most operating system come with the client application. FTP provides no confidentiality or integrity to the data being trasfered.

130 questions
0
votes
1 answer

Secure FTP (AUTH TLS) fails from office lan

From our office LAN, Secure FTP connections fail. But with a VPN client connection, there is no problem. What could be the cause of this problem, what do we have to change on our firewall? I normally use another client but for comparison, I use…
theking2
  • 149
  • 7
0
votes
1 answer

How does FTP Bounce work

I am currently doing a project on FTP bounce and after reading up, I still do not really get how it works/can work. Appreciate if I can receive enlightenment from the experts here. I understand that the FTP bounce vulnerability allows an attacker to…
Mervyn Heng
  • 11
  • 2
0
votes
2 answers

Is an Ethernet FTP server on a local network safe if an attacker can't access the router?

I'm having trouble understanding certain security concepts and I was wondering if someone could help me out with some questions. Imagine this setup: A home router with a very strong password, that has a wireless AP (WPA2) also with a strong…
LukeSmith
  • 3
  • 1
0
votes
1 answer

What's the worse an attacker could do with anonymous FTP login?

Hypothetically speaking, if an attacker finds an anonymous FTP login what's the worse they can possibly do other than the obvious impact of gaining access to the files via FTP?
Jack
  • 1
0
votes
1 answer

Does an insecure ftp connection compromise all other data transfers?

I am not a technical person. My company recently asked me to install FileZilla to transfer files to and from a server in my company. So I installed FileZilla and typed in the credentials my company gave. Then the following message appeared. I would…
user86756744708
  • 3
  • 1
0
votes
1 answer

Recommended secure option for uploading files to web server from a dynamic IP?

I need the best way to access a webserver to upload/modify a PHP script. The website contains very sensitive information, gaining unauthorized access to this server and modifying files would lead to an extremely huge financial loss. I guess the best…
user1324762
  • 111
  • 2
0
votes
2 answers

Percent-encoding in WinSCP in SFTP password, why?

I recently discovered the problem with Percent-encoding. It makes perfectly sense when we are dealing with such problem in a browser scenario. But I don't get why a software like WinSCP can be affected by the same issue. In my opinion the special…
Francesco Mantovani
  • 123
  • 5
0
votes
1 answer

Trying To Set Up An SFTP Server Securely On a Synology NAS? Any Advice?

So I have SFTP running on a server that I'm working on. It works fine, and it has a very long random like 20 digit password to login. I've already looked at the Synology logs and since port 22 is exposed hackers have already tried and failed at…
user2963603
  • 111
  • 3
0
votes
0 answers

Exploitation differences between Docker and VirtualBox for CVE-2010-4221

I am currently working on a research project where I analyze exploits in different virtualized environments. As an example I picked ProFTPd v1.3.3c which has a remote code execution vulnerability. I did setup two environments: A VirtualBox machine…
Kyu96
  • 165
  • 1
  • 7
0
votes
0 answers

How to tell if FTP connection is secured with TLS1.2

I need to be sure that the FTP requests that my Windows 10 app is making are secured with TLS1.2 because our ftp host is going to start charging more money if we use any other version. I've tried looking at the packets with both Wire Shark and…
Matt Ellen
  • 101
  • 2
0
votes
1 answer

Monitoring of Logging

I wish to implement logging and auditing features on a Windows 10 client used for carrying out secure transactions through our FTP server, with a client organisation. What all features could I select in the Windows' auditing options, so that I…
Vikas
  • 347
  • 1
  • 12
0
votes
1 answer

Security for FTP connection within a server

In PHP, I am accessing another user's files using FTP on the same server. In this case, do I need to use secure FTP or is it ok to have normal FTP as both source and destination are on the same server? Adding after getting some comments and…
Vishnu
  • 101
  • 2
0
votes
1 answer

Differ between encrypted and unecrypted FTP (21) without login

I'm looking at an IP range as a part of a project and discovered several FTP server. They all run vsftpd (3.0.2) on port 21. I do not have login credentials and anonymous logins are disabled. Can I somehow identify whether the server would encrypt…
SaAtomic
  • 989
  • 2
  • 15
  • 27
0
votes
2 answers

FTP over local network

If I am on a home network over a standard passphrase-protected router, is it safe* (definition below) to use FTP? * safe as in attackers not being able to see the contents to the FTP connection, assuming they have not connected to the router Here is…
stopstopstop
  • 3
  • 2
0
votes
1 answer

website hacked and all its content erased despite the protections

i was hacked by a guy who erased everything. I spent the day to put everything in order, and i would like to find a solution for this : he erased all the files, and also changed the title for "www" in the FTP in "www-xXX". Is there a possibility to…
Paul
  • 159
  • 2
  • 7
1 2 3
…
8
9