Security risks caused by improper authorization of FTP Server (Serv-U) accounts

Security risks caused by improper authorization of FTP Server (Serv-U) accounts

There are a lot of free FTP websites on the Internet that provide resource downloads. On the one hand, it facilitates our lives, and on the other hand, improper configuration also causes great security risks. Here is an example of Serv-U.

After uploading the network horse, we log on to webshell. One of the functions is Serv-U privilege escalation, which establishes an administrator. This privilege escalation is different from the privilege escalation here. It is accessed as a guest/network-services identity, the default account LocalAdministrator is Serv-U. The default password is "# l @ $ ak #. lk; 0 @ P "to escalate permissions. The Elevation of Privilege script in versions above 7.0 and below is different.

 

 

After logging on to the FTP server locally, run the following command to add an ftptest account as the administrator;

 

 

View on FTP, Account Added successfully;

 

Therefore, it is important to grant permissions with caution.