NMAP - FTP bounce
-
we can tell an anonymous ftp server to connect to machines inside its firewall
-
ping 20.10.1.17 (host behind a firewall)
-
ping 128.70.21.256
-
nmap -ports 20-32 anonymous:foobar@128.70.21.256 20.10.1.17
-
connection to ftp://anonymous:foobar@128.70.21.256:21
-
TCP ftp bounce scan against 20.10.1.17
-
list of ports, protocols, services
|