📁 FTP — Port 21
ftp-ssl -z secure verify=0 -p IP_ADDChecklist
- Try anonymous login (
anonymous/ blank oranonymous).- Look for readable/writable dirs; combine with a web root if one exists (upload → RCE).
- Brute-force creds with Hydra → password-attacks.
- Grab banner/version → search exploits in exploitation.