A commonly found, low severity vulnerability is the “FTP Server Does Not Support Auth Command” vulnerability. This blog post will describe how to validate this finding and provide output for screenshotting and adding into a report, as well as provide readers with a bash script which will automate the process of validation.

Recently a buddy of mine was on a pentest and he saw a username list in the format of Smith, John@gmail.com and while this was all fine and dandy the emails were actually stored as jsmith@gmail.com.