FTP Credentials
Description
General
- Documentation: https://tools.ietf.org/html/rfc959
- Summary: File Transfer Protocol (FTP) is a network protocol designed for the transfer of files between a client and a server. This detector aims at finding FTP credentials in the form of variable assignments or a URI connection string.
Revoke the secret
A user credentials can be revoked or modified on the server side.
Details for FTP URI credentials
-
Family: identifiers
-
Category: data_storage
-
High recall: True
-
Validity check available: True
-
Analyzer available: True
-
Revoker available: False
-
On-premise instances exist: False
-
Only valid secrets raise an alert: False
-
Occurrences found for one million commits: 3.18
-
Prefixed: True
Details for FTP credentials assignment
-
Family: identifiers
-
Category: data_storage
-
High recall: False
-
Validity check available: True
-
Analyzer available: True
-
Revoker available: False
-
On-premise instances exist: False
-
Only valid secrets raise an alert: False
-
Occurrences found for one million commits: 6
-
Prefixed: False
Secret Analyzer
Analysis Method
- Provider allows scopes enumeration: False
- Total network call count: 10
- Total call count may vary: True
HTTP Calls
Requests are designed to capture metadata and not to function effectively. No HTTP calls for this analyzer.
Other Calls
Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package).
ftplib.FTP.connect
ftplib.FTP.cwd
ftplib.FTP.login
ftplib.FTP.mlsd
ftplib.FTP.nlst
ftplib.FTP.pwd
ftplib.FTP.quit
ftplib.FTP.sendcmd('FEAT')
ftplib.FTP.sendcmd('SYST')
ftplib.FTP_TLS.prot_p
