(Aug 5, 2025 12:14 AM)Money- Wrote:  Just look for CVEs on github. Or MSF scanners but i think those are outdated i guess..

Github look for interestcing ftp CVEs and use those or read up new CVEs for FTP and try to write a scanner from the POC give on research articles.

(Aug 5, 2025 12:04 AM)Bshol Wrote:  Could you let me know the tools that make it easy to find FTP vulnerabilities? Thanks.

• 1. Network Scanners & Script Engines
  • Nmap (+ NSE scripts)
    • ftp-anon: checks for anonymous login
      
    • ftp-brute: brute-forces credentials
      
    • ftp-vsftpd-backdoor: detects the infamous 2.3.4 backdoor
      
  • Masscan: Extremely fast host/port discovery; pair with Nmap NSE for deeper FTP checks.
    
• 2. Vulnerability Scanners
  • OpenVAS (Greenbone): Full-blown CVE-driven scans—including FTP misconfigs and known CVEs.
    
  • Nessus: Commercial-grade checks for outdated FTP daemons, weak ciphers, permissive configs.
    
• 3. Brute-Forcing & Credential Testing
  • Hydra: Parallelized FTP login brute-forcing; supports username/password lists.
    
  • Medusa: Modular, large-scale credential testing.
    
  • Patator: Flexible brute-forcer, scriptable for FTP or multi-step auth flows.
    
• 4. Protocol Fuzzers
  • boofuzz: Python-based, script custom FTP commands to spot crashes/vuln conditions.
    
  • SPIKE Proxy: Generic fuzzer adaptable for FTP to uncover buffer-overflows.
    
• 5. Pen-test Frameworks & Exploitation
  • Metasploit: auxiliary/scanner/ftp/* (e.g. ftp_version, ftp_syst, ftp_banner) + exploit modules for vsftpd, ProFTPD, wu-ftpd backdoors.
    
  • RouterSploit: Embedded-device exploits, includes FTP modules for weak creds and common flaws.
    
• 6. Compliance & Misconfiguration Checkers
  • Nikto: Scans FTP servers for default files, weak banners, outdated software.
    
  • Lynis: Audits Unix/Linux hosts (including FTP daemon configs) for hardening gaps.