FTP: Allow Anonymous user to view files/folders uploaded by real user
I've launched an AWS EC2 Instance running Ubuntu, installed `vsftpd` and made changes to t 2025-1-2 00:21:41 Author: www.reddit.com(查看原文) 阅读量:14 收藏

I've launched an AWS EC2 Instance running Ubuntu, installed `vsftpd` and made changes to the `vsftpd.conf` file to allow `anonymous user` login along with adding a `real user`.

While logged into the FTP server as the `real user` I created a file called `secret.txt` and uploaded it with the `put` command and verified it's available in the directory with the `ls` command.  

While logged into the same FTP server this time as `anonymous user` I'm unable to view the `secret.txt` file `real user` created while logged in.

Is there a way an `anonymous user` can access the files/folders of another user, If so would that be possible by making a change to the `vsftpd.conf` file?

The reason why I'd like to allow the `anonymous user` to view the `real user` `secret.txt` file is because I'm duplicating one of TryHackMe's Network Security rooms that provided a walkthrough for FTP exploit with an `anonymous user`, but in my own environment from the ground up to get a better understanding and hands on experience.


文章来源: https://www.reddit.com/r/blackhat/comments/1hrgsjl/ftp_allow_anonymous_user_to_view_filesfolders/
如有侵权请联系:admin#unsafe.sh