[afrihhilal]

om, ane mau nanya nih, cara exploit ftp-bounce di sebuah server gimana yak??
ane udah baca di mbah google tapi ane gak mudeng. :d
nih hasil scan pake nmapnya :

Spoiler! :

nmap -A -T5 -sS -Pn xxx.xxx.xxx.xxx

Starting Nmap 6.25 ( http://nmap.org ) at 2013-04-02 03:47 WIT
Warning: xxx.xxx.xxx.xxx giving up on port because retransmission cap hit (2).
Nmap scan report for xxx.xxx.xxx.xxx
Host is up (0.070s latency).
rDNS record for xxx.xxx.xxx.xxx
Not shown: 950 closed ports, 38 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Pure-FTPd
| ftp-anon: Anonymous FTP login allowed (FTP code 230)
| drwxr-xr-x 2 0 0 4096 Dec 11 2011 .
|_drwxr-xr-x 2 0 0 4096 Dec 11 2011 ..
|_ftp-bounce: bounce working!

OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 99.13 seconds

ane baca di http://www.ouah.org/ftpbounce.html malah ga mudeng maksudnye.. hehehehehe
ajarin ya om2... :-

[zee eichel]

read : http://indonesianbacktrack.or.id/forum/T...nce-Attack