Hacking FTP

[ENDer2000]

Am o dilema....
Se poate face un hacking FTP?
Eu am citit ca se poate, insa nu scria si cum anume.
Iata problema. Sa zicem ca am pe un cont la un FTP public niste arhive.
Se poate sa transfer aceste arhive pe un alt FTP fara ca acestea sa treaca pe la mine? Nu de alta, dar... viteza lor e mult mai mare decat a mea pe Romtelekkt...

------------------
ENDer
http://KicKME.tO/ENDer2000

Fuck YOU guys...
I'm Going home...!!!

[Roger]

Vai, cum se poate ca tocmai acesti "fine 3l33t cool hax0r d00dez" care umbla cu materiale "il=e" sa nu fie la curent cu realitatile tehnologiei curente? Cum se face ca abuzam de termenul [cr,h]ack-ing de fiecare data cind sintem confruntati cu o situatie pe care nu ne-o putem explica/ne depaseste cunostintele.

PS. Daca nu ma insel era ceva cu "FXP", n-avea nici o legatura cu [cr,h]ack-ul si depindea doar de capabilitatile/configurarea serverului de ftp in cauza (in speta de port si pasv).

[Magnum]

Poate nu inteleg bine ce zici, dar daca e vorba numai de transfer ftp de pe un server pe altul, incearca Windows Commander 4.03. Stie sa lucreze cu 10 servere simultan...

Daca nu despre asta e vorba, sorry...

[ENDer2000]

Bai tata... stiu f. bine despre ce e vorba si nu imi depaseste cunostiintele, doar ca acest aspect nu prea e tratat pe nicaieri. FPX-ul e o porcarie! A aparut pe unul dintre primele cd-uri Xtrem PC, dar nu face nimic! .

Pe mine ma intereseaza mai ales serverele care suporta acest lucru. Ultima varianta de CuteFTP suporta site to site transfer, dar site-urile nu o suporta! Caut o metoda care sa pacaleasca respectivele servere!

------------------
ENDer http://KicKME.tO/ENDer2000

Fuck YOU guys...
I'm Going home...!!!

[This message has been edited by ENDer2000 (edited 27 Iulie 2000).]

Cam orice server FTP are si optiunea "Block FTP_bounce attacks"; din documentatia FTP Serv-U:

Block FTP_bounce attacks

When checked, the server will only allow file transfers between the FTP client and server, and block any direct server-to-server transfers (FXP). This prevents a type of malicious attack known as 'FTP_bounce attacks' (see CERT advisory CA-97.27).

In 'active mode' an FTP client can send a 'PORT' command to a server which tells the server to which IP address and port number it should connect for the next data transfer. There is normally no limitation on the address or port numbers, so a client can instruct the server to connect to any other system rather than to the FTP client itself. This can be abused by malicious clients to probe a network where the server opens up a connection to another server that the client does not normally have access to. FTP_bounce attacks are described in more detail in CERT advisory CA-97.27.

For normal file transfers between server and client there is no need for the server to ever connect to anything other than the client for data transfers. However, there is one legitimate use that deviates from this: The FTP protocol allows for direct transfers from one server to another, bypassing the client. This is called FXP, and some FTP clients can facilitate in setting up such transfers. Typical use would be to transfer large amounts of data between servers on a high-speed network, where the FTP client is on a slow link. In such a case the FTP client opens a connection to both servers and instructs them to directly transfer files between them, using the proper combination of 'PORT' and 'PASV' FTP commands. In case FTP_bounce attacks are blocked at the server receiving the 'PORT' commands such direct transfers will not work.

Concluzie: daca serverul a fost setat cu "Block FTP_bounce attacks = ON", nu prea mai ai ce face...

[ENDer2000]

1ox

Razvi

ENDer

n-am idee la dilema ta, da` ce ma doare pe mine e ca n-am putut incarca RePWL-u de la tine de pe sait nici cu gozilla. cre` ca e bulit.
trimite-mi-l si mie via e-mail
apropo, ai vazut noul look de la www.uha1.com ?
ai incercat chestia aia rushinoasa cu internet 0$ cu Legion etc etc? merge?