[pmatt]

Hey

Is it possible to hack a website if I have access to the ftp server but I can´t see all.
I want access to the whole ftp server or better to the whole website. Is this possible?

I want access because the owner have some illegal things(illegal porns but not cp) on it that he sells to fucked up people and I want delete it or.

I hope someone can help me. I am new to this but I am willing to learn.

edit: This ports are open:

Discovered open port 21/tcp

Discovered open port 443/tcp

Discovered open port 143/tcp

Discovered open port 587/tcp

Discovered open port 53/tcp

Discovered open port 80/tcp

Discovered open port 993/tcp

Discovered open port 22/tcp

Discovered open port 995/tcp

Discovered open port 110/tcp

[f1re_w1re]

If you gain access to the FTP server you can technically drop your shell and gain access to the server hosting the site. You will have to get in there to really see the details and what the system offers.

[SIM-2974208]

web shell . that's all what you should do .

[L C K]

You might want to add tacs such as -sC -sV to gain the version and service of ftp they are running. That way you can enumerate on possible exploits.

[pmatt]

Thank you all for your help!
On port 21 it says Pure-FTPd. I will search for an exploit for this...

[The Mystic One]

Thank you all for your help!
On port 21 it says Pure-FTPd. I will search for an exploit for this...

Yeah good luck the only pureFTP versions to be vulnerable are older versions.

You may want to check CVE-2017-12170 since that is the most recent vuln but is for versions 1.0.46 revision 1.

If the ProFTP versions is 1.0.30 or prior you may want to check out CVE-2011-1575.