SGSPECTER.GHOSTCOMMUNITY EDITION
← LABS
// GUIDED TRAINING · Network

File Transfer Audit

FTP hardening

Medium300 PTSOFFLINE SIMULATION
// 01 · LEARN

FTP HARDENING

FTP is a legacy protocol that commonly sends credentials without transport encryption. Anonymous access must be intentional and confined to non-sensitive data.

LEARNING GOAL

Identify the misconfiguration in the synthetic evidence and explain a defensive correction.

// 02 · INVESTIGATE

EVIDENCE

vsftpd.conf (training excerpt)
anonymous_enable=YES
local_enable=YES
write_enable=NO
anon_root=/srv/ftp/public
review_marker=anonymous_is_a_choice
HINT

Find anonymous_enable in the configuration.

// 03 · PRACTICE

KNOWLEDGE CHECK

What setting permits unauthenticated access?

// 04 · CAPTURE FLAG

Submit the review marker in SG{marker} format.

Progress stays in this browser.