How to determine if anonymous login is enabled?

  • Open msfconsole
  • use auxiliary/scanner/ftp/anonymous
  • msf auxiliary(anonymous) >set rhosts ENTER_IP_HERE
  • msf auxiliary(anonymous) >exploit

Notice the text “Anonymous READ”, this means we can login using:

  • user = anonymous
  • pass = anonymous (blank or any other password works)

How do we log in?

  • use “anonymous” for user and just press enter for pass

You can also connect via your web browser

  • If you are using Chrome, the browser will try to log in as anonymous user

How to read a file?

    • downloaded file is located in root

How to list files?

  • ls, just like linux

How to change dir?

  • cd, just like linux
  • cd .., just like linux