What's Changed
FTP Plugin Enhancements
- Fix false positives on port 25 - FTP plugin no longer incorrectly detects SMTP services (#55)
- Whitelist-based detection - Uses FTP keyword matching instead of blacklist approach
- Confidence scoring - Returns high/medium/low confidence based on port and keywords
- Version extraction - Extracts version from vsftpd, ProFTPD, Pure-FTPd, FileZilla, IIS FTP, wu-ftpd
- CPE generation - Generates CPE strings for vulnerability tracking (uses
*for unknown versions) - 78 unit tests - Comprehensive test coverage for detection logic
Detection Strategy
| Scenario | Result |
|---|---|
| Port 21 + FTP keyword | HIGH confidence FTP |
| Non-standard port + FTP keyword | MEDIUM confidence FTP |
| Port 25 + No FTP keyword | REJECTED (not FTP) |
Full Changelog: v1.1.18...v1.1.19