EvilZone

Hacking and Security => Hacking and Security => : Amrut January 05, 2013, 12:44:55 PM

: FTP over TLS
: Amrut January 05, 2013, 12:44:55 PM

Hi,


I am downloading from a FTP server with "FTP using Explicit SSL (Auth TLS)". My questions is can anyone see the file names of the files being transferred?

: Re: FTP over TLS
: proxx January 05, 2013, 02:37:12 PM

No if its fully encrypted noone should be able to see whats going on except for you and the hosting party.

: Re: FTP over TLS
: Amrut January 05, 2013, 02:58:59 PM

Thanks for your reply. How does one tell if it's fully encrypted?

: Re: FTP over TLS
: proxx January 05, 2013, 03:18:16 PM

Wireshark?

: Re: FTP over TLS
: Amrut January 05, 2013, 03:46:58 PM

I am currently using the portable version and I have started capturing. I am unsure what to look for to tell if it's fully encrypted or not?

: Re: FTP over TLS
: proxx January 05, 2013, 03:51:00 PM

Well anything if course that could disclose what is going on around the FTP transaction.
Just download the file and see what happens.

: Re: FTP over TLS
: Amrut January 05, 2013, 03:54:44 PM

This is all I see


http://img834.imageshack.us/img834/9706/47860601.png

: Re: FTP over TLS
: proxx January 06, 2013, 10:39:32 AM

Well you should especially look at the beginning of the transaction.
SSL isnt the most secure protocol on the planet but its pretty good.

: Re: FTP over TLS
: Amrut January 07, 2013, 09:10:38 AM

Thank you for the help bud.