Port Scanners (5)
NMAP - FTP bounce
- we can tell an anonymous ftp server to connect to machines inside its firewall
- ping 20.10.1.17 (host behind a firewall)
- ping 128.70.21.256
- nmap -ports 20-32 anonymous:foobar@128.70.21.256 20.10.1.17
- connection to ftp://anonymous:foobar@128.70.21.256:21
- TCP ftp bounce scan against 20.10.1.17
- list of ports, protocols, services