Method testAnonymousAccess

plugins/services/ftp.go:173–221

testAnonymousAccess 测试FTP匿名访问

(ctx context.Context, info *common.HostInfo, config *common.Config, state *common.State)

// testAnonymousAccess 测试FTP匿名访问
func (p *FTPPlugin) testAnonymousAccess(ctx context.Context, info *common.HostInfo, config *common.Config, state *common.State) *ScanResult {
	target := info.Target()

	anonymousCreds := []Credential{
		{Username: "anonymous", Password: "anonymous"},
		{Username: "anonymous", Password: ""},
		{Username: "ftp", Password: "ftp"},
	}

	for _, cred := range anonymousCreds {
		select {
		case <-ctx.Done():
			return nil
		default:
		}

		result := p.doFTPAuth(ctx, info, cred, config, state)
		if result.Success && result.Conn != nil {
			// 获取文件列表
			ftpConn, ok := result.Conn.(*ftpConnWrapper)
			if !ok {
				_ = result.Conn.Close()
				return nil
			}
			fileList := p.listFTPFiles(ftpConn.ServerConn)
			_ = result.Conn.Close()

			var output strings.Builder
			output.WriteString(fmt.Sprintf("FTP %s 匿名访问 - %s:%s", target, cred.Username, cred.Password))
			if len(fileList) > 0 {
				for _, file := range fileList {
					output.WriteString(fmt.Sprintf("\n   [->] %s", file))
				}
			}
			common.LogVuln(output.String())

			return &ScanResult{
				Type:     plugins.ResultTypeCredential,
				Success:  true,
				Service:  "ftp",
				Username: cred.Username,
				Password: cred.Password,
				Banner:   "FTP匿名访问",
			}
		}
	}

	return nil
}

// getFileListAfterAuth 认证成功后获取文件列表
func (p *FTPPlugin) getFileListAfterAuth(info *common.HostInfo, username, password string, config *common.Config, state *common.State) []string {