{
	"id": "752055a7-bd0e-4168-8741-e27c36c1c5cf",
	"created_at": "2026-04-06T01:31:18.128918Z",
	"updated_at": "2026-04-10T03:35:21.415779Z",
	"deleted_at": null,
	"sha1_hash": "ce82ea288dddb9a5bd140887c01b870ad290b441",
	"title": "ftp",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 51997,
	"plain_text": "ftp\r\nBy robinharwood\r\nArchived: 2026-04-06 01:15:31 UTC\r\nTransfers files to and from a computer running a File Transfer Protocol (ftp) server service. This command can be\r\nused interactively or in batch mode by processing ASCII text files.\r\nftp [-v] [-d] [-i] [-n] [-g] [-s:\u003cfilename\u003e] [-a] [-A] [-x:\u003csendbuffer\u003e] [-r:\u003crecvbuffer\u003e] [-b:\u003casyncbuffers\u003e][\r\nParameter Description\r\n-v Suppresses display of remote server responses.\r\n-d\r\nEnables debugging, displaying all commands passed between the FTP client and FTP\r\nserver.\r\n-i Disables interactive prompting during multiple file transfers.\r\n-n Suppresses auto-login upon initial connection.\r\n-g\r\nDisables file name globbing. Glob permits the use of the asterisk (*) and question mark\r\n(?) as wildcard characters in local file and path names.\r\n-s: \u003cfilename\u003e\r\nSpecifies a text file that contains ftp commands. These commands run automatically\r\nafter ftp starts. This parameter allows no spaces. Use this parameter instead of\r\nredirection ( \u003c ). Note: In Windows 8 and Windows Server 2012 or later operating\r\nsystems, the text file must be written in UTF-8.\r\n-a Specifies that any local interface can be used when binding the ftp data connection.\r\n-A Logs onto the ftp server as anonymous.\r\n-x: \u003csendbuffer\u003e Overrides the default SO_SNDBUF size of 8192.\r\n-r: \u003crecvbuffer\u003e Overrides the default SO_RCVBUF size of 8192.\r\n-b:\r\n\u003casyncbuffers\u003e\r\nOverrides the default async buffer count of 3.\r\n-w:\r\n\u003cwindowsize\u003e\r\nSpecifies the size of the transfer buffer. The default window size is 65535 bytes.\r\n\u003chost\u003e\r\nSpecifies the computer name, IP address, or IPv6 address of the ftp server to which to\r\nconnect. The host name or address, if specified, must be the last parameter on the line.\r\nhttps://docs.microsoft.com/en-us/windows-server/administration/windows-commands/ftp\r\nPage 1 of 2\n\nParameter Description\r\n-? Displays help at the command prompt.\r\nThe ftp command-line parameters are case-sensitive.\r\nThis command is available only if the Internet Protocol (TCP/IP) protocol is installed as a component in\r\nthe properties of a network adapter in Network Connections.\r\nThe ftp command can be used interactively. After it is started, ftp creates a sub-environment in which you\r\ncan use ftp commands. You can return to the command prompt by typing the quit command. When the ftp\r\nsub-environment is running, it is indicated by the ftp \u003e command prompt. For more information, see the\r\nftp commands.\r\nThe ftp command supports the use of IPv6 when the IPv6 protocol is installed.\r\nTo log on to the ftp server named ftp.example.microsoft.com , type:\r\nftp ftp.example.microsoft.com\r\nTo log on to the ftp server named ftp.example.microsoft.com and run the ftp commands contained in a file\r\nnamed resync.txt, type:\r\nftp -s:resync.txt ftp.example.microsoft.com\r\nCommand-Line Syntax Key\r\nAdditional FTP guidance\r\nIP version 6\r\nIPv6 applications\r\nSource: https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/ftp\r\nhttps://docs.microsoft.com/en-us/windows-server/administration/windows-commands/ftp\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/ftp"
	],
	"report_names": [
		"ftp"
	],
	"threat_actors": [
		{
			"id": "2864e40a-f233-4618-ac61-b03760a41cbb",
			"created_at": "2023-12-01T02:02:34.272108Z",
			"updated_at": "2026-04-10T02:00:04.97558Z",
			"deleted_at": null,
			"main_name": "WildCard",
			"aliases": [],
			"source_name": "ETDA:WildCard",
			"tools": [
				"RustDown",
				"SysJoker"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "256a6a2d-e8a2-4497-b399-628a7fad4b3e",
			"created_at": "2023-11-30T02:00:07.299845Z",
			"updated_at": "2026-04-10T02:00:03.484788Z",
			"deleted_at": null,
			"main_name": "WildCard",
			"aliases": [],
			"source_name": "MISPGALAXY:WildCard",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775439078,
	"ts_updated_at": 1775792121,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/ce82ea288dddb9a5bd140887c01b870ad290b441.pdf",
		"text": "https://archive.orkl.eu/ce82ea288dddb9a5bd140887c01b870ad290b441.txt",
		"img": "https://archive.orkl.eu/ce82ea288dddb9a5bd140887c01b870ad290b441.jpg"
	}
}