{“lastseen”:”2026-05-06T19:28:02″,”description”:”Detect anonymous read\/write FTP service access. Module Options msf use auxiliary\/scanner\/ftp\/ftpanonymous msf auxiliaryftpanonymous show actions …actions… msf auxiliaryftpanonymous set ACTION msf auxiliaryftpanonymous show options …show and set…”,”published”:”2026-05-06T19:01:18″,”modified”:”2026-05-06T19:01:18″,”type”:”metasploit”,”title”:”Anonymous FTP Access Detection”,”source”:””,”references”:””,”id”:”MSF:AUXILIARY-SCANNER-FTP-FTP_ANONYMOUS-“,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-1999-0497″],”sourceData”:”# frozen_string_literal: true\\n\\n##\\n# This module requires Metasploit: https:\/\/metasploit.com\/download\\n# Current source: https:\/\/github.com\/rapid7\/metasploit-framework\\n##\\n\\nclass MetasploitModule \\u003c Msf::Auxiliary\\n include Msf::Exploit::Remote::Ftp\\n include Msf::Auxiliary::Scanner\\n include Msf::Module::Deprecated\\n moved_from ‘auxiliary\/scanner\/ftp\/anonymous’\\n\\n def initialize\\n super(\\n ‘Name’ =\\u003e ‘Anonymous FTP Access Detection’,\\n ‘Description’ =\\u003e ‘Detect anonymous (read\/write) FTP service access.’,\\n ‘References’ =\\u003e [\\n [‘URL’, ‘https:\/\/en.wikipedia.org\/wiki\/File_Transfer_Protocol#Anonymous_FTP’],\\n [‘CVE’, ‘1999-0497’],\\n ],\\n ‘Author’ =\\u003e [\\n ‘Matteo Cantoni \\u003cgoony[at]nothink.org\\u003e’,\\n ‘g0tmi1k’ # @g0tmi1k – additional features\\n ],\\n ‘License’ =\\u003e MSF_LICENSE,\\n ‘Notes’ =\\u003e {\\n ‘Stability’ =\\u003e [CRASH_SAFE],\\n ‘SideEffects’ =\\u003e [IOC_IN_LOGS],\\n ‘Reliability’ =\\u003e []\\n }\\n )\\n\\n register_options(\\n [\\n Opt::RPORT(21),\\n OptBool.new(‘STORE_LOOT’, [false, ‘Store the directory listing as loot’, true])\\n ]\\n )\\n end\\n\\n def run_host(target_host)\\n res = connect_login(true, false)\\n\\n if res\\n dir = Rex::Text.rand_text_alpha(8)\\n vprint_status(\\”Testing write access, creating test directory: #{dir}\\”)\\n # Alt would be to use STOR\\n write_check = send_cmd([‘MKD’, dir], true)\\n\\n if write_check \\u0026\\u0026 write_check =~ \/^2\/\\n access_type = ‘Read\/Write’\\n vprint_status(\\”Removing test directory: #{dir}\\”)\\n send_cmd([‘RMD’, dir], true)\\n else\\n access_type = ‘Read-only’\\n end\\n\\n print_good(\\”Anonymous #{access_type} access (#{@banner_version})\\”)\\n\\n if datastore[‘STORE_LOOT’]\\n vprint_status(‘Listing directory contents’)\\n listing = send_cmd_data([‘LS’], nil)\\n if listing.nil?\\n print_warning(‘Could not retrieve directory listing (data connection failed)’)\\n elsif listing[1].nil? || listing[1].empty?\\n vprint_status(‘Directory listing: (empty)’)\\n else\\n vprint_status(\\”Directory listing:\\\\n#{listing[1]}\\”)\\n path = store_loot(‘ftp.anonymous’, ‘text\/plain’, rhost, listing[1], ‘ftp_anonymous.txt’, ‘Anonymous FTP directory listing’)\\n print_good(\\”Directory listing stored to: #{path}\\”)\\n end\\n end\\n\\n report_vuln(\\n host: rhost,\\n port: rport,\\n proto: ‘tcp’,\\n sname: ‘ftp’,\\n name: ‘Anonymous FTP Access’,\\n info: \\”Anonymous FTP login accepted with #{access_type} access\\”,\\n refs: references\\n )\\n register_creds(target_host, access_type)\\n elsif banner\\n print_warning(\\”FTP service, but no anonymous access (#{banner_version})\\”)\\n else\\n vprint_warning(‘No FTP banner received’)\\n end\\n rescue ::Rex::TimeoutError, ::Rex::ConnectionError, ::EOFError, ::Errno::ECONNREFUSED =\\u003e e\\n vprint_error(e.message)\\n report_host(host: rhost)\\n rescue ::Interrupt\\n raise $ERROR_INFO\\n ensure\\n disconnect\\n end\\n\\n def register_creds(target_host, access_type)\\n # Build service information\\n service_data = {\\n address: target_host,\\n port: rport,\\n service_name: ‘ftp’,\\n protocol: ‘tcp’,\\n workspace_id: myworkspace_id\\n }\\n\\n # Build credential information\\n credential_data = {\\n origin_type: :service,\\n module_fullname: fullname,\\n private_data: datastore[‘FTPPASS’],\\n private_type: :password,\\n username: datastore[‘FTPUSER’],\\n workspace_id: myworkspace_id\\n }\\n\\n credential_data.merge!(service_data)\\n credential_core = create_credential(credential_data)\\n\\n # Assemble the options hash for creating the Metasploit::Credential::Login object\\n login_data = {\\n access_level: access_type,\\n core: credential_core,\\n last_attempted_at: DateTime.now,\\n status: Metasploit::Model::Login::Status::SUCCESSFUL,\\n workspace_id: myworkspace_id\\n }\\n\\n login_data.merge!(service_data)\\n create_credential_login(login_data)\\n end\\nend\\n”,”sourceHref”:”https:\/\/github.com\/rapid7\/metasploit-framework\/blob\/master\/modules\/auxiliary\/scanner\/ftp\/ftp_anonymous.rb”,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.rapid7.com\/db\/modules\/auxiliary\/scanner\/ftp\/ftp_anonymous\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-05-06T19:28:02″,”description”:”Detect anonymous read\/write FTP service access. Module Options msf use auxiliary\/scanner\/ftp\/ftpanonymous msf auxiliaryftpanonymous show actions …actions… msf auxiliaryftpanonymous set ACTION msf auxiliaryftpanonymous show options …show…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,169,13,33,7,11,5],"class_list":["post-51772","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-metasploit","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n