fingerprinting a windows ftpd

From: Franklin DeMatto (franklinat_private)
Date: Fri Jul 06 2001 - 12:09:41 PDT

  • Next message: Jason Ackley: "Re: Fwd: Re: spoofing 255.255.255.255 techniques"

    Does anyone have any advice on how to fingerprint this windows ftp server?
    I can't get a banner with the server name.
    HELP recieves the following response (none of the commands seemed to ID the 
    server)
    Does anyone recognize it?
    
    HELP
    214-Supported Commands :
    214-PORT STOR APPE RETR CWD
    214-PWD  XPWD USER PASS LIST
    214-NLST TYPE SYST QUIT DELE
    214-SIZE REST RNFR RNTO XMKD
    214-MKD  RMD  ABOR PASV NOOP
    214-CDUP SITE HELP STAT STOU*
    214-MDTM STRU SMNT XCUP ACCT
    214-ALLO REIN MODE XRMD XDEL
    214-
    214-Special Commands :
    214-SITE MSG
    214-SITE PSWD
    214-SITE ZONE
    214-SITE WHO**
    214-SITE CHAT**
    214-(* not implemented)
    214-(** restricted)
    214 [End of Help].
    Franklin DeMatto
    franklinat_private
    qDefense - DEFENDING THE ELECTRONIC FRONTIER
    
    
    --------------------------------------------------------------------------------------
    
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service
    For more information on SecurityFocus' SIA service which automatically alerts you to 
    the latest security vulnerabilities please see:
    
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Fri Jul 06 2001 - 13:47:39 PDT