FTP bounce attack

In the field of computer networking and security, the FTP bounce attack is an exploit (computer science) of the FTP protocol whereby an attacker is able to use the PORT command to request access to Transmission Control Protocol indirectly through the use of the victim machine as a middle man for the request.

This technique can be used to port scan hosts discreetly, and to access specific ports that the attacker cannot access through a direct connection.

Nmap is a port scanner (www.insecure.org/nmap) that can utilize an FTP bounce attack to scan other servers.

=External links=

*[http://www.cert.org/advisories/CA-1997-27.html CERT Advisory on FTP Bounce Attack] *[http://www.cert.org/tech_tips/ftp_port_attacks.html CERT Article on FTP Bounce Attck]