hey there i just noticed that at times the file servudaemon.exe gets deleted when uploaded to a box also another file is winmgnt.exe been wondering is there any other file which can be used to start a FTP on a remote box ?

you do realize you can rename the servudaemon.exe file and if your any decent kind of comp user hex it so you can also rename the servudaemon.ini file.

You guys do realize that continuing to use serv-u as your pub ftp server software is getting flagged by most proficient system security admins?

Either edit out the banner flags or change it to match known antivirus names so it looks like legitimate traffic auto updating. It wont pass close scrutiny but will get missed many times.

The banners are a big flag, most corporations do not use Serv-u!

Those of you on the white hat side who are not all with it yet, need to watch for serv-u banners, and any other weird ftp connections in IDS. Find those and you usually find your compromised systems by the FXP groups.

i know about changing the file name but it would still get picked up as for hexing im not good with that so i dont know hwo to change it so it wont be picked up by the anti-virus software if any of you guys got one which doesnt get picked up and willing to post it would be helpful

Change the name of ServU to match a legit windows process: IE RunDll32 or svchost.

well there are a few out there raiden ftpd being one of them although it aint easy to understand. mostly used for dumps though but useable for normal ftp's also . like i said raiden is not easy to understand and not as easy to install as serv-u.

i use raidentFTPd for my local ftp, works perfect, i havnt ever had any problem with stability

RaidenFTPd is nice yes, BUT it's slow ppl say
slow in the word my peepz dont get max speed @ fxp-ing

raiden has one advantage > it has no paket caching, so it's faster then servu.

once i installed servu on a 10mbit .us server and only got 4kb to western europe.
after installing raiden i got something around 400kb

do any of you have the source code of servudaemon

yep raiden seems to be more efficient than serv-u as seen on many dumps it it's farmore secured and use better the bandiwdth
hard to configure but once it's done u got it

there is warftp and the ftp server of xitami is also not bad

but damn people how hard it is to use a freaken hex tool???

There is a new ftp server that seems have good performance and take little memory and CPU. It has serveral cool features I never saw in other ftp servers. The link is at http://www.xlightftpd.com . I have tried for about a week, no problem so far .

i will check it, thank for your info !

Thanks for the info cxu123,,,,, will check it out

Konh,

How do you tweak the buffer in serv-u? size,......?

I'm from europe and when i do a speedtest from my remote box in the USA to I get 100kb/s. After putting serv-u i got 12kb/s. When I use the microsoft ftp service I've got 60kb/S.

Thx

Been using IOFtpd, i find it takes a bit of work setting up but when it's going it's sweet. Some nice features to it as well.

M.

yea, ioFtpd i very nice.

i use it for local ftp - best i ever used

winmgnt is the 3.x launcher used in the old iis days btw

raidenftpd is mutch faster then servu but u need to edit everything over and over again for every server ... thats just a pain in the arse , i now use an linux port of proftpd

mutch nicer than servu ..

see ya

I prefer proftp too.. easy configuration good performance.. Try it an you will get happy ^^

Cya Doc

Use ioFTPD is the best ftp client

Hello guys, i search a pack ioftpd... Help me in my request

read the docs at www.ioftpd.com noone will make the work for you its soo easy to set up a io all you need is some scripting skill and a IQ >= 1 ^^

cya

There is several IoFTP-pack but nobody share that!

I use raidenftpd and it works great. In my experience, Servu hasn't really proven itself worthy.

raiden is in my opinion also a very good ftp server ptogram.

raiden is in my opinion a very good ftpd. a bit difficult to set it for use on remote machines but very good

ioftpd is great

www.ioftpd.com

raiden ist nice, but i personally prefer ioftpd.
ok, io isn't that easy to configure but it's just great

I prefer proftp too.. easy configuration good performance.. Try it an you will get happy ^^

Cya Doc

servu is great for remote machines.... never had any problems with it! .... but now trying to get ioftpd running on remote machines cause ther some more nice functions and scripts to use in it...

Using Serv-U in my own network, but I'm thinking about changing to ioFTPD, 'cause it seems more efficient.
Tried a few things on it, but can't get it to work (at least not how I want ...)

using ioftpd also older regged version .. couldn't find the last version .. and the free is crippled :s .. 1 bad point tho no site exec supported like in serv-u , haven't seen any scirpts for that either that would take care of the site exec. other then that it works like a charm used to use serv-u b4 but since all the exploits fro it came out i switched

yea site exec in the ini ...

ex:
rescan = EXEC ..\scripts\ioA\ioA.exe rescan
rescan = -Filler

then you have the site rescan command .. but that's not entirely the same

site exec like in servu gives :

site exec test.bat
500 'SITE EXEC': Command not understood.

if there's a way to get the site exec to work lemme know

exec = EXEC ..\scripts\exec.bat

[Scripts]
EXEC = EXEC c:\windows\system32\cmd.exe /c

But be very aware what you execute and set your rights to master only.

@+