Re: Sounds like ftp-anon needs work?

[Ron <ron () skullsecurity net>]

On Thu, 27 May 2010 20:49:39 -0600 David Fifield
<david () bamsoftware com> wrote:
> On Sat, May 22, 2010 at 06:48:08PM +0200, Gutek wrote:
>
> I don't really like the idea of testing for read-write. What if the
> server lets you create a directory, but not delete it? I think this
> could be a common configuration for file-swapping servers that allow
> creating files anonymously but not deleting them. Nmap would leave a
> bunch of empty directories around.
>
> David Fifield

That's a possibility, but I think it's the exception rather than the rule. Finding writable FTP shares can be extremely 
handy. 

I'd suggest disabling checking for r/w by default, but having an option to turn it on. 

-- 
Ron Bowes
http://www.skullsecurity.org
http://www.twitter.com/iagox86

Attachment: _bin
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/