📁 FTP — Port 21

ftp-ssl -z secure verify=0 -p IP_ADD

Checklist

  • Try anonymous login (anonymous / blank or anonymous).
  • Look for readable/writable dirs; combine with a web root if one exists (upload → RCE).
  • Brute-force creds with Hydra → password-attacks.
  • Grab banner/version → search exploits in exploitation.