How to install vsftpd on linux ?

-

Vsftpd installation and configuration
Install

apt-get install vsftpd

After installing, the server starts automatically and listens on TCP port 21 by default.

We can check it within netstat  and also check the /etc/passwd and /etc/group and also take a look of ls l /srv.









Enable anonymous.



Addusers.

To add the user we have to use this command
adduser mortadelo
adduser filemon.

Create a  3 files in /srv/ftp
touch file1.txt

and also in users home.

From other system try to connect the ftp server
ftp and ip address


then try to download the files that we have created before
get and filename




Now go back to server and check the /var/log/vsftpd.log. In this directory we will find the all process that was done by client.
As I first tried to download a file which does not exists in the ftp and then I tried to download the other which exists in the ftp.
So as in the image we can see that first try was failed and another was successful.



Basic configuration vsfpd


Allow connection to Local-users:

Go to the vsftpd configuration file and uncomment the line and also write the yes.




Allow Local-users to download and upload the files:
Go to the vsftpd configuration file and uncomment the local_umask line.


Keep in mind that after every change in the configuration file need to restart the service.

service vsftpd restart

we also have to uncomment the line chroot_local_user=YES




After that we have to to add some line to upgrade the and update the vsftpd because without this we can't enter through localuser and can't create the directory.


echo "deb http://ftp.us.debian.org/debian jessie main contrib non-free" >> /etc/apt/sources.list
aptitude update
aptitude upgrade vsftpd
echo "allow_writeable_chroot=YES" >> /etc/vsftpd.conf
service vsftpd restart

Now enter through a localuser and try to create the directories. This time it will give the permision to connect and create the directories.

Activity:
Do that user mortadelo can change the directory but filemon can't?

We need to add the ftp user in to chroot list with command echo.
echo mortadelo >  /etc/vsftpd.chroot_list


By doing this we can see that user mortadelo is in now /home/mortadelo.


 
Mode passive
Beside the pasv_enable=YES, specify a port range in which VSFTP will run PASV mode:
pasv_min_port=50000
pasv_max_port=50999
port_enable=YES
Don't forget to configure iptables allows packet transmission on these ports:

iptables -I INPUT -p tcp --dport 50000:50999 -j ACCEPT

now restart the service and from client login to server ftp and after that write passive


Comments

Post a Comment

Popular posts from this blog

How to install coWPAtty 4.6 on Ubuntu?

-
Image
Cowpatty C owpatty is a great tool for cracking WPA/WPA2 keys via either a dictionary attack or via rainbow tables. All it needs to see it a client connect to the network (this is called a "handshake"). First we need to download the required files. If you already have them you can skip them. sudo apt-get install build-essential sudo apt-get install libssl-dev sudo apt-get install libpcap0.8-dev sudo apt-get install libdigest-hmac-perl Next Download cowpatty 4.6 wget http://wirelessdefence.org/Contents/Files/cowpatty-4.6.tgz md5sum cowpatty-4.6.tgz extract and move into the directory using the following tar -xvf cowpatty-4.6.tgz cd cowpatty-4.6 Next we need to download the patch and patch the source code. wget http://proton.cygnusx-1.org/~edgan/cowpatty/cowpatty-4.6-fixup16.patch patch < cowpatty-4.6-fixup16.patch Next we will compile and install it and then test it make sudo make install cd .. cowpatty If all goes well y...
Read more

Alpine

-
Image
How to use alpine?   Install Alpine in clinet system and send the mail using alpine.. To install the alpine run this command in the terminal. apt-get install alpine After that if you dont have configure MX records In dns then first create it The ip that you are seeing is the ip of server POSTFIX . mail IN A ip IN MX 10 mail Now configure the Alpine. Hit the S to enter into the setup Enter C Here you have to wirte the User domain (you'r domain) SMTP server (your SMTP as you have write in the DNS server) After that Enter E to save this configuration and then compose the mail to you'r user.. THATS IT.....
Read more

How to get the user name and password of Facebook with DNS spoofing ?

-
Image
DO THIS ONLY FOR EDUCATIONAL PURPOSE DNSspoofing with Ettercap dns spoof. Ettercap stands for Ethernet Capture. Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis. Here i am going to show you how to spoof dns with ettercap dnsspoof but this will only work in internal network. First need to install ettercap: sudo apt-get install ettercap-dbg ettercap-common now find the the etter.dns file and edit it . To locate the file write locate etter.dns now edit the file and write the spacific website name that you want to spoof. Like I am going to use facebook and the ip of server (your ip). nano /etc/ettercap/etter.dns Now run the setoolkit.... select the options... 1) Social Engineering attack > 2) WebSite Attack...
Read more