+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Hack a website with ftp access (/showthread.php?tid=5910505)
Hack a website with ftp access - pmatt - Nov 21, 2018
Hey
Is it possible to hack a website if I have access to the ftp server but I can´t see all.
I want access to the whole ftp server or better to the whole website. Is this possible?
I want access because the owner have some illegal things(illegal porns but not cp) on it that he sells to fucked up people and I want delete it or.
I hope someone can help me. I am new to this but I am willing to learn.
edit: This ports are open:
Quote:Discovered open port 21/tcp
Discovered open port 443/tcp
Discovered open port 143/tcp
Discovered open port 587/tcp
Discovered open port 53/tcp
Discovered open port 80/tcp
Discovered open port 993/tcp
Discovered open port 22/tcp
Discovered open port 995/tcp
Discovered open port 110/tcp
RE: Hack a website with ftp access - f1re_w1re - Nov 21, 2018
If you gain access to the FTP server you can technically drop your shell and gain access to the server hosting the site. You will have to get in there to really see the details and what the system offers.
RE: Hack a website with ftp access - SIM-2974208 - Nov 21, 2018
web shell . that's all what you should do .
RE: Hack a website with ftp access - L C K - Nov 21, 2018
You might want to add tacs such as -sC -sV to gain the version and service of ftp they are running. That way you can enumerate on possible exploits.
RE: Hack a website with ftp access - pmatt - Nov 22, 2018
Thank you all for your help!
On port 21 it says Pure-FTPd. I will search for an exploit for this...
RE: Hack a website with ftp access - The Mystic One - Nov 22, 2018
(Nov 22, 2018 03:45 AM)pmatt Wrote: Thank you all for your help!
On port 21 it says Pure-FTPd. I will search for an exploit for this...
Yeah good luck the only pureFTP versions to be vulnerable are older versions.
You may want to check CVE-2017-12170 since that is the most recent vuln but is for versions 1.0.46 revision 1.
If the ProFTP versions is 1.0.30 or prior you may want to check out CVE-2011-1575.