|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
How to hack FTP |
|
Posted: Sun Aug 31, 2008 6:20 am |
|
|
hackingnatt |
Beginner |
|
|
Joined: Aug 27, 2008 |
Posts: 3 |
|
|
|
|
|
|
|
Hi One,
pls tell me how to hack FTP by right way.
I hav been used hydra command line.
But it wasn't OK.
thanks |
|
|
|
|
Posted: Sun Aug 31, 2008 12:55 pm |
|
|
lenny |
Valuable expert |
|
|
Joined: May 15, 2008 |
Posts: 275 |
|
|
|
|
|
|
|
Ok, well first get the type of software used on the target server
Once you have that, you can start to look into exploits for the sortware... |
|
|
|
|
Posted: Mon Sep 01, 2008 4:39 am |
|
|
hackingnatt |
Beginner |
|
|
Joined: Aug 27, 2008 |
Posts: 3 |
|
|
|
|
|
|
|
how can i know the software which they are using.
I only know the sites.
I don;t know the software.
thx |
|
|
|
|
Posted: Mon Sep 01, 2008 11:30 am |
|
|
lenny |
Valuable expert |
|
|
Joined: May 15, 2008 |
Posts: 275 |
|
|
|
|
|
|
|
Ok, when you connect via FTP with fake username and password, usually in the header is the server software (and sometimes version). Try connection to the FTP server using fake usernames and passwords and post the entire header of the FTP connection - If we have this we may be able to help you |
|
|
|
|
Posted: Wed Feb 04, 2009 7:13 pm |
|
|
KriVa |
Beginner |
|
|
Joined: Feb 04, 2009 |
Posts: 2 |
|
|
|
|
|
|
|
I'm kinda new here... but if you use a WhoIs site,and you come up with "Server type: Apache", is that actually the server software or not? |
|
|
|
|
Posted: Wed Feb 04, 2009 7:19 pm |
|
|
lenny |
Valuable expert |
|
|
Joined: May 15, 2008 |
Posts: 275 |
|
|
|
|
|
|
|
Apache is a type of web server software that is behind many websites on the internet. It is very "large" in terms of software making it prone to vulnerabilities. If your target is running a vulnerable version of Apache, you could gain entry relatively quickly to the target server in one form or another. |
|
|
|
|
Posted: Wed Feb 04, 2009 7:33 pm |
|
|
KriVa |
Beginner |
|
|
Joined: Feb 04, 2009 |
Posts: 2 |
|
|
|
|
|
|
|
this sounds really tempting. I know a website i'd really love to get access to,can you explain me how? Or show me a topic where it's explained? Anythin that helped you can help me I guess |
|
|
|
|
Posted: Wed Feb 04, 2009 8:46 pm |
|
|
lenny |
Valuable expert |
|
|
Joined: May 15, 2008 |
Posts: 275 |
|
|
|
|
|
|
|
Ok, firstly i'll say that however tempting it is, it probably won't work unfortunately. The first job is to identify possible weak points for attack, eg software. You have already identified that the server runs Apache, the next step would be to get the names and version numbers of as many pieces of software running on the server as possible.
Some ideas:
The FTP server and version?
The version of any forum or CMS software the website is hosting?
The Apache version?
Is there a remote-accessible MySQL server running?
Is there a SSH daemon running?
If any of these still confuse you, PM me with the details and i'll do some digging for you |
|
|
|
|
Posted: Wed Feb 25, 2009 5:05 am |
|
|
sk8er |
Advanced user |
|
|
Joined: May 09, 2005 |
Posts: 64 |
|
|
|
|
|
|
|
I need information
... :
for , "proftpd 3.1"
salu2 |
|
|
|
|
Posted: Wed Feb 25, 2009 5:30 pm |
|
|
lenny |
Valuable expert |
|
|
Joined: May 15, 2008 |
Posts: 275 |
|
|
|
|
|
|
|
|
|
|
|
Posted: Wed Feb 25, 2009 9:20 pm |
|
|
one23 |
Advanced user |
|
|
Joined: Dec 12, 2008 |
Posts: 98 |
|
|
|
|
|
|
|
|
|
|
|
Posted: Thu Feb 26, 2009 3:45 am |
|
|
sk8er |
Advanced user |
|
|
Joined: May 09, 2005 |
Posts: 64 |
|
|
|
|
|
|
|
thank's |
|
|
|
|
www.waraxe.us Forum Index -> Newbies corner
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|