Re: Sounds like ftp-anon needs work?

[kx <kxmail () gmail com>]

I have an itching suspicion it is because of the username and password
nmap uses vs. metasploit

Nmap:
        try(socket:send("USER anonymous\r\n"))
        try(socket:send("PASS IEUser@\r\n"))

Metasploit:
  OptString.new('FTPUSER', [ false, 'The username to authenticate as',
'anonymous']),
  OptString.new('FTPPASS', [ false, 'The password for the specified
username', 'mozilla () example com'])

But I don't know of an ftp server to test against that nmap doesn't
get a response from, but metasploit does.

cheers,
  kx

On Tue, May 18, 2010 at 9:27 AM, Ron <ron () skullsecurity net> wrote:
> Absolutely! I do my best to answer scripting questions here or in #nmap on freenode whenever I can.
>
> (If you do ask in #nmap on Freenode, make sure you stick around for the answer :) ).
>
> On Tue, 18 May 2010 08:31:29 -0400 Walt Scrivens <walts () gate net> wrote:
> > This looks interesting.   I'll give it a try, but I'm a total N00B at
> > Nmap Scripting and I'm likely to have to ask a lot of questions.  OK?
> >
> > Walt
> >
> > On May 17, 2010, at 7:26 PM, Ron wrote:
> >
> > > http://eromang.zataz.com/2010/05/16/anonymous-ftp-scanning-differences-between-metasploit-and-nmap
> > >
> > > Metasploit found about twice as many anonymous FTP servers than
> > > Nmap's ftp-anon.nse script. Metasploit also says whether it's read
> > > or read/write.
> > >
> > > Improving ftp-anon.nse might be a good task for somebody who's
> > > looking to learn Nmap scripting a little. It's going to be more
> > > troubleshooting than coding, likely.
> > >
> > > Any takers?
> > >
> > > --
> > > Ron Bowes
> > > http://www.skullsecurity.org
> > > http://www.twitter.com/iagox86
> > > _______________________________________________
> > > Sent through the nmap-dev mailing list
> > > http://cgi.insecure.org/mailman/listinfo/nmap-dev
> > > Archived at http://seclists.org/nmap-dev/
>
>
> --
> Ron Bowes
> http://www.skullsecurity.org
> http://www.twitter.com/iagox86
>
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/