File transfer security – FTP
File transfer security (FTP) has been the most common protocol for file transfers. When we talk about a file transfer protocol like FTP, it means the protocol is used to send streams of bits stored as a single unit in a particular filesystem. However, this process is not completely secure.
FTP has a lot of vulnerabilities and also it does not provide any encryption for data transfer.
Let's discuss a few security risks related to using FTP:
- FTP bounce attack: When a file transfer happens using the FTP protocol, the source server sends the data to the client, and then the client transmits the data to the destination server. However, in the case of slow connections, users may use the FTP proxy and this makes the client transmit the data directly between the two servers.
- In this kind of scenario, a hacker may use a
PORT
command to make a request to access ports by being the man-in-the-middle for that particular file transfer request. Then, the hacker can execute port...