FTP Banner Detection

# SPDX-FileCopyrightText: 2005 SecuriTeam
# SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.10092");
  script_version("2024-06-07T15:38:39+0000");
  script_tag(name:"last_modification", value:"2024-06-07 15:38:39 +0000 (Fri, 07 Jun 2024)");
  script_tag(name:"creation_date", value:"2005-11-03 14:08:04 +0100 (Thu, 03 Nov 2005)");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_name("FTP Banner Detection");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2005 SecuriTeam");
  script_family("Product detection");
  # nb: ftp_get_banner() is using a FTP command internally which requires a
  # successful login so the secpod_ftp_anonymous.nasl is expected to be
  # in here. This dependency also pulls in the logins.nasl.
  script_dependencies("find_service2.nasl", "find_service_3digits.nasl",
                      "ftpd_no_cmd.nasl", "secpod_ftp_anonymous.nasl");
  script_require_ports("Services/ftp", 21, 990);

  script_tag(name:"summary", value:"This script detects and reports a FTP Server Banner.");

  script_tag(name:"qod_type", value:"remote_banner");

  exit(0);
}

include("ftp_func.inc");
include("host_details.inc");
include("port_service_func.inc");

ports = ftp_get_ports();
foreach port( ports ) {

  # nb: ftp_get_banner() is verifying the received data via ftp_verify_banner() and will
  # return NULL/FALSE if we haven't received a FTP banner.
  banner = ftp_get_banner( port:port );
  if( ! banner )
    continue;

  bannerlo = tolower( banner );
  guess = NULL;

  if( service_is_unknown( port:port ) )
    service_register( port:port, proto:"ftp", message:"A FTP Server seems to be running on this port." );

  help = ftp_get_cmd_banner( port:port, cmd:"HELP" );
  syst = ftp_get_cmd_banner( port:port, cmd:"SYST" );
  stat = ftp_get_cmd_banner( port:port, cmd:"STAT" );

  set_kb_item( name:"ftp/banner/available", value:TRUE );
  install = port + "/tcp";

  if( "NcFTPd" >< banner ) {
    set_kb_item( name:"ftp/ncftpd/detected", value:TRUE );
    register_product( cpe:"cpe:/a:ncftpd:ftp_server", location:install, port:port );
    guess += '\n- NcFTPd';
  }

  if( "FtpXQ FTP" >< banner ) {
    set_kb_item( name:"ftp/ftpxq/detected", value:TRUE );
    guess += '\n- FtpXQ FTP';
  }

  if( "Cerberus FTP" >< banner ) {
    set_kb_item( name:"ftp/cerberus/detected", value:TRUE );
    guess += '\n- Cerberus FTP';
  }

  if( "Home Ftp Server" >< banner ) {
    set_kb_item( name:"ftp/home_ftp/detected", value:TRUE );
    guess += '\n- Home FTP Server';
  }

  if( "Welcome to DXM's FTP Server" >< banner ) {
    set_kb_item( name:"ftp/xm_easy_personal/detected", value:TRUE );
    guess += '\n- XM Easy Personal FTP Server';
  }

  if( "VicFTPS" >< banner ) {
    set_kb_item( name:"ftp/vicftps/detected", value:TRUE );
    guess += '\n- VicFTPS';
  }

  if( "Core FTP Server" >< banner ) {
    set_kb_item( name:"ftp/core_ftp/detected", value:TRUE );
    guess += '\n- Core FTP';
  }

  if( "Femitter FTP Server ready." >< banner ) {
    set_kb_item( name:"ftp/femitter_ftp/detected", value:TRUE );
    guess += '\n- Femitter FTP Server';
  }

  if( "FileCOPA FTP Server" >< banner ) {
    set_kb_item( name:"ftp/intervations/filecopa/detected", value:TRUE );
    guess += '\n- InterVations FileCOPA FTP Server';
  }

  if( banner =~ "220[- ]+smallftpd" ) {
    set_kb_item( name:"ftp/smallftpd/detected", value:TRUE );
    guess += '\n- Small FTPD Server';
  }

  if( "TYPSoft FTP Server" >< banner ) {
    set_kb_item( name:"ftp/typsoft/detected", value:TRUE );
    guess += '\n- TYPSoft FTP Server';
  }

  if( "DSC ftpd" >< banner ) {
    set_kb_item( name:"ftp/ricoh/dsc_ftpd/detected", value:TRUE );
    guess += '\n- Ricoh DC Software FTP Server';
  }

  if( "Telnet-Ftp Server" >< banner ) {
    set_kb_item( name:"ftp/telnet_ftp/detected", value:TRUE );
    guess += '\n- Telnet-FTP Server';
  }

  if( banner =~ "220[- ]FTP Server ready" ) {
    authed = get_kb_item( "ftp/fingerprints/" + port + "/csid_banner_authed" );
    if( authed && ( authed =~ "PORT\s+HP " || authed =~ "Directory:\s+Description:" ) ) {
      set_kb_item( name:"ftp/hp/printer/detected", value:TRUE );
      guess += '\n- HP Printer';
    }

    set_kb_item( name:"ftp/ftp_ready_banner/detected", value:TRUE );
    guess += '\n- Various FTP servers like KnFTP or Schneider Electric Quantum Ethernet Module';
  }

  if( banner =~ "220 JD FTP Server ready" ) {
    set_kb_item( name:"ftp/hp/printer/detected", value:TRUE );
    guess += '\n- HP Printer';
  }

  if( banner =~ "220[- ]Ready" ) {
    set_kb_item( name:"ftp/ready_banner/detected", value:TRUE );
    guess += '\n- Various FTP servers like Janitza FTP';
  }

  if( "TurboFTP Server" >< banner ) {
    set_kb_item( name:"ftp/turboftp/detected", value:TRUE );
    guess += '\n- TurboFTP Server';
  }

  if( "BlackMoon FTP Server" >< banner ) {
    set_kb_item( name:"ftp/blackmoon/detected", value:TRUE );
    guess += '\n- BlackMoon FTP';
  }

  if( "Solar FTP Server" >< banner ) {
    set_kb_item( name:"ftp/solarftp/detected", value:TRUE );
    guess += '\n- Solar FTP';
  }

  if( "WS_FTP Server" >< banner ) {
    set_kb_item( name:"ftp/ws_ftp/detected", value:TRUE );
    guess += '\n- WS_FTP Server';
  }

  if( "FTP Utility FTP server" >< banner ) {
    set_kb_item( name:"ftp/konica/ftp_utility/detected", value:TRUE );
    guess += '\n- Konica Minolta FTP Utility';
  }

  if( "BisonWare BisonFTP server" >< banner ) {
    set_kb_item( name:"ftp/bisonware/bisonftp/detected", value:TRUE );
    guess += '\n- BisonWare BisonFTP Server';
  }

  if( "Welcome to ColoradoFTP" >< banner && "www.coldcore.com" >< banner ) {
    set_kb_item( name:"ftp/coldcore/coloradoftp/detected", value:TRUE );
    guess += '\n- ColoradoFTP';
  }

  if( "FRITZ!Box" >< banner && "FTP server ready." >< banner ) {
    set_kb_item( name:"ftp/avm/fritzbox_ftp/detected", value:TRUE );
    guess += '\n- AVM FRITZ!Box FTP';
  }

  if( egrep( string:banner, pattern:"FTP server.*[Vv]ersion (wu|wuftpd)-" ) ) {
    set_kb_item( name:"ftp/wu_ftpd/detected", value:TRUE );
    guess += '\n- WU-FTPD';
  }

  if( "WarFTPd" >< banner || "WAR-FTPD" >< banner ) {
    set_kb_item( name:"ftp/war_ftpd/detected", value:TRUE );
    guess += '\n- WarFTPd';
  }

  if( "I'm freeFTPd" >< banner ) {
    set_kb_item( name:"ftp/free_ftpd/detected", value:TRUE );
    guess += '\n- freeFTPd';
  }

  if( banner =~ "220[- ]Browser Ftp Server\." ) {
    set_kb_item( name:"ftp/browser_ftp_server_banner/detected", value:TRUE );
    guess += '\n- Various FTP servers like MySCADA MyPRO';
  }

  if( "Welcome to D-Link's FTP Server" >< banner ) {
    set_kb_item( name:"ftp/dlink/ftp_server/detected", value:TRUE );
    guess += '\n- Multiple D-Link products like Central WiFiManager';
  }

  if( "pyftpd" >< bannerlo ) {
    set_kb_item( name:"ftp/pyftpdlib/detected", value:TRUE );
    guess += '\n- pyftpdlib';
  }

  if( "FTP Services for ClearPath MCP" >< banner ) {
    set_kb_item( name:"ftp/clearpath/mcp/detected", value:TRUE );
    guess += '\n- ClearPath MCP';
  }

  if( "welcome to vibnode." >< bannerlo ) {
    set_kb_item( name:"ftp/prueftechnik/vibnode/detected", value:TRUE );
    guess += '\n- PRUFTECHNIK VIBNODE';
  }

  if( "Welcome to Pure-FTPd" >< banner || "Welcome to PureFTPd" >< banner || "Pure-FTPd - http://pureftpd.org" >< help ) {
    set_kb_item( name:"ftp/pure_ftpd/detected", value:TRUE );
    guess += '\n- Pure-FTPd';
  }

  if( "FCX STARDOM" >< banner ) {
    set_kb_item( name:"ftp/yokogawa/stardom/detected", value:TRUE );
    guess += '\n- Yokogawa STARDOM';
  }

  if( banner =~ "CP ([0-9\-]+) (IT )?FTP-Server V([0-9.]+) ready for new user" ) {
    set_kb_item( name:"ftp/siemens/simatic_cp/detected", value:TRUE );
    guess += '\n- Siemens SIMATIC CP';
  }

  if( banner =~ "220[- ]FreeFloat" || "FreeFloat Ftp Server" >< banner ) {
    set_kb_item( name:"ftp/freefloat/detected", value:TRUE );
    guess += '\n- FreeFloat';
  }

  if( banner =~ "220[- ]quickshare ftpd" ) {
    set_kb_item( name:"ftp/quickshare/file_share/detected", value:TRUE );
    guess += '\n- QuickShare File Share';
  }

  if( banner =~ "220[- ]SpoonFTP" ) {
    set_kb_item( name:"ftp/spoonftp/detected", value:TRUE );
    guess += '\n- SpoonFTP';
  }

  if( "Quick 'n Easy FTP Server" >< banner ) {
    set_kb_item( name:"ftp/quick_n_easy/detected", value:TRUE );
    guess += '\n' + "- Quick 'n Easy FTP Server";
  }

  if( "Powerd by BigFoolCat Ftp Server" >< banner || banner =~ "220[- ]+Welcome to my ftp server" ) {
    set_kb_item( name:"ftp/easy_ftp/detected", value:TRUE );
    guess += '\n- Easy~FTP Server';
  }

  if( "Golden FTP Server" >< banner ) {
    set_kb_item( name:"ftp/golden_tfp/detected", value:TRUE );
    guess += '\n- Golden FTP Server';
  }

  if( banner =~ "220[- ]ActiveFax" ) {
    set_kb_item( name:"ftp/actfax_ftp/detected", value:TRUE );
    guess += '\n- ActFax FTP Server';
  }

  if( egrep( pattern:".*heck Point Firewall-1 Secure FTP.*", string:banner ) ) {
    set_kb_item( name:"ftp/fw1ftpd/detected", value:TRUE );
    register_product( cpe:"cpe:/a:checkpoint:firewall-1", location:install, port:port );
    guess += '\n- Check Point Firewall-1';
  }

  if( "Menasoft GrayFTP Server" >< banner ) {
    set_kb_item( name:"ftp/menasoft/sphereftp/detected", value:TRUE );
    guess += '\n- Menasoft SphereFTP Server';
  }

  # nb: Keep in sync with the banner used in gb_axis_devices_ftp_detect.nasl and ftpserver_detect_type_nd_version.nasl
  if( banner =~ "220[- ](AXIS|Axis).+(Camera|Video Server|Station)" ) {
    set_kb_item( name:"ftp/axis/device/detected", value:TRUE );
    guess += '\n- Axis Device (Network Camera, Video Server, ...)';
  }

  if( "ProFTPD" >< banner || "NASFTPD Turbo station" >< banner ) {
    set_kb_item( name:"ftp/proftpd/detected", value:TRUE );
    guess += '\n- ProFTPD';
  }

  if( banner =~ "^220[- ]bftpd " ) {
    set_kb_item( name:"ftp/bftpd/detected", value:TRUE );
    guess += '\n- Bftpd FTP';
  }

  if( "FileZilla Server" >< banner ) {
    set_kb_item( name:"ftp/filezilla/detected", value:TRUE );
    guess += '\n- FileZilla';
  }

  if( banner =~ " FTP server \(MikroTik .* ready" ) {
    set_kb_item( name:"ftp/mikrotik/detected", value:TRUE );
    guess += '\n- MikroTik RouterOS';
  }

  if( "Welcome on" >< banner && "Gabriel's FTP Server" >< banner ) {
    set_kb_item( name:"ftp/open-ftpd/detected", value:TRUE );
    guess += '\n- Open-FTPD';
  }

  if( "xlweb FTP server" >< banner ) {
    set_kb_item( name:"ftp/honeywell/falcon_xl/detected", value:TRUE );
    guess += '\n- Honeywell Falcon XL Web Controller';
  }

  if( banner =~ "220[- ]PCMan's FTP Server" ) {
    set_kb_item( name:"ftp/pcmans/ftp/detected", value:TRUE );
    guess += '\n' + "-  PCMan's FTP Server";
  }

  if( "Welcome to Seagate Central" >< banner ) {
    set_kb_item( name:"ftp/seagate/central/detected", value:TRUE );
    guess += '\n- Seagate Central';
  }

  if( banner =~ "220[- ]Titan FTP Server " ) {
    set_kb_item( name:"ftp/titan_ftp_server/detected", value:TRUE );
    guess += '\n- Titan FTP Server';
  }

  if( "Minftpd" >< banner ) {
    set_kb_item( name:"ftp/ftpdmin/detected", value:TRUE );
    guess += '\n- Ftpdmin';
  }

  if( "220 Features p a" >< banner || "Sami FTP Server" >< banner ) {
    set_kb_item( name:"ftp/samiftp/detected", value:TRUE );
    guess += '\n- KarjaSoft Sami FTP';
  }

  if( banner =~ "Welcome to the (Cisco TelePresence|Codian) MCU" ) {
    set_kb_item( name:"ftp/cisco/telepresence/detected", value:TRUE );
    guess += '\n- Cisco TelePresence';
  }

  if( egrep( pattern:".*icrosoft FTP.*", string:banner ) ) {
    set_kb_item( name:"ftp/microsoft/iis_ftp/detected", value:TRUE );
    guess += '\n- Microsoft IIS FTP Server';
  }

  if( "ManageUPSnet" >< banner ) {
    set_kb_item( name:"ftp/manageupsnet/detected", value:TRUE );
    guess += '\n- ManageUPSNET FTP';
  }

  if( banner =~ "(Isilon|PowerScale) OneFS" ) {
    set_kb_item( name:"ftp/emc/isilon_onefs/detected", value:TRUE );
    guess += '\n- EMC PowerScale / Isilon OneFS';
  }

  if( "SurgeFTP" >< banner ) {
    set_kb_item( name:"ftp/surgeftp/detected", value:TRUE );
    guess += '\n- SurgeFTP';
  }

  if( "GuildFTPd" >< banner || "GuildFTPD FTP" >< banner ) {
    set_kb_item( name:"ftp/guildftpd/detected", value:TRUE );
    guess += '\n- GuildFTPd';
  }

  if( "IOS-FTP server" >< banner ) {
    set_kb_item( name:"ftp/cisco/ios_ftp/detected", value:TRUE );
    guess += '\n- Cisco IOS FTP';
  }

  if( "UNIVERSAL FTP SERVER" >< banner ) {
    set_kb_item( name:"ftp/teamtek/universal_ftp/detected", value:TRUE );
    guess += '\n- Teamtek Universal FTP';
  }

  if( "BlackJumboDog" >< banner ) {
    set_kb_item( name:"ftp/blackjumbodog/detected", value:TRUE );
    guess += '\n- BlackJumboDog';
  }

  if( "SunFTP " >< banner ) {
    set_kb_item( name:"ftp/sunftp/detected", value:TRUE );
    guess += '\n- SunFTP';
  }

  if( "EFTP " >< banner ) {
    set_kb_item( name:"ftp/eftp/detected", value:TRUE );
    guess += '\n- EFTP';
  }

  if( "ArGoSoft FTP Server" >< banner ) {
    set_kb_item( name:"ftp/argosoft/ftp/detected", value:TRUE );
    guess += '\n- ArGoSoft FTP';
  }

  if( "GlobalSCAPE Secure FTP Server" >< banner ||
      "GlobalSCAPE Enhanced File Transfer Server" >< banner ||
      "220 EFT Server" >< banner ||
      "220 EFT Login -" >< banner ||
      " EFT Server Enterprise" >< banner ) {
    set_kb_item( name:"ftp/globalscape/secure_ftp/detected", value:TRUE );
    guess += '\n- Fortra Globalscape EFT';
  }

  if( "HP ARPA FTP" >< banner ) {
    set_kb_item( name:"ftp/hp/arpa_ftp/detected", value:TRUE );
    guess += '\n- HP ARPA FTP / MPEi/X';
  }

  if( egrep( pattern:".*RaidenFTPD.*", string:banner ) ) {
    set_kb_item( name:"ftp/raidenftpd/detected", value:TRUE );
    guess += '\n- RaidenFTPD';
  }

  if( "Serv-U FTP Server" >< banner ) {
    set_kb_item( name:"ftp/serv-u/detected", value:TRUE );
    guess += '\n- Serv-U FTP';
  }

  if( "Flash FTP Server" >< banner ) {
    set_kb_item( name:"ftp/flash/ftp/detected", value:TRUE );
    guess += '\n- Flash FTP Server';
  }

  if( "PlatinumFTPserver" >< banner ) {
    set_kb_item( name:"ftp/platinum/ftp/detected", value:TRUE );
    guess += '\n- Platinum FTP';
  }

  if( egrep( pattern:"^220.*RobotFTP", string:banner ) ) {
    set_kb_item( name:"ftp/robot/ftp/detected", value:TRUE );
    guess += '\n- RobotFTP';
  }

  if( "220 Wing FTP Server" >< banner ) {
    set_kb_item( name:"ftp/wing_ftp/server/detected", value:TRUE );
    guess += '\n- Wing FTP Server';
  }

  if( "220-Complete FTP server" >< banner ) {
    set_kb_item( name:"ftp/complete/ftp/detected", value:TRUE );
    guess += '\n- Complete FTP';
  }

  if( banner =~ "[vV]xWorks" && "FTP server" >< banner ) {
    set_kb_item( name:"ftp/vxftpd/detected", value:TRUE );
    guess += '\n- VxWorks FTP';
  }

  if( "XLINK" >< banner ) {
    set_kb_item( name:"ftp/omni-nfs/xlink/detected", value:TRUE );
    guess += '\n- Omni-NFS XLINK';
  }

  if( "httpdx" >< banner ) {
    set_kb_item( name:"ftp/httpdx/detected", value:TRUE );
    set_kb_item( name:"www_or_ftp/httpdx/detected", value:TRUE );
    guess += '\n- httpdx';
  }

  if( "vsftpd" >< bannerlo ) {
    set_kb_item( name:"ftp/vsftpd/detected", value:TRUE );
    guess += '\n- vsFTPd';
  }

  if( "tnftpd" >< banner ) {
    set_kb_item( name:"ftp/tnftpd/detected", value:TRUE );
    guess += '\n- tnftpd';
  }

  if( "Buffy" >< banner ) {
    set_kb_item( name:"ftp/buffy/detected", value:TRUE );
    guess += '\n- Buffy';
  }

  if( "Data ONTAP" >< banner ) {
    set_kb_item( name:"ftp/netapp/data_ontap/detected", value:TRUE );
    guess += '\n- NetApp Data ONTAP';
  }

  if( banner =~ "NET+OS [0-9.]+ FTP server ready\." ) {
    set_kb_item( name:"ftp/net_os/detected", value:TRUE );
    set_kb_item( name:"ftp/datastream/detected", value:TRUE );
    guess += '\n- NET+OS';
    guess += '\n- DataStream (DS800) Device';
  }

  if( "RICOH" >< banner && "FTP server" >< banner ) {
    set_kb_item( name:"ftp/ricoh/printer/detected", value:TRUE );
    guess += '\n- RICOH Printer';
  }

  if( "Lexmark" >< banner && "FTP Server" >< banner ) {
    set_kb_item( name:"ftp/lexmark/printer/detected", value:TRUE );
    guess += '\n- Lexmark Printer';
  }

  if( "TOSHIBA" >< banner && " FTP Server" >< banner ) {
    set_kb_item( name:"ftp/toshiba/printer/detected", value:TRUE );
    guess += '\n- Toshiba Printer';
  }

  if( "220-You are user number " >< banner || "220-Local time is now " >< banner ||
      " users (the maximum) are already logged in, sorry" >< banner ) {
    set_kb_item( name:"ftp/user_number_local_time_banner/detected", value:TRUE );
    guess += '\n- Various FTP servers (e.g. Zyxel Access Points)';
  }

  if( "Virtual-FTPd (vftpd) ready." >< banner ) {
    set_kb_item( name:"ftp/vftpd/detected", value:TRUE );
    guess += '\n- Virtual-FTPd';
  }

  if( banner =~ "FTP server \(FirstClass" ) {
    set_kb_item( name:"ftp/opentext/firstclass/detected", value:TRUE );
    guess += '\n- OpenText FirstClass';
  }

  if( "220 DrayTek FTP" >< banner ) {
    set_kb_item( name:"ftp/draytek/detected", value:TRUE );
    guess += '\n- DrayTek Vigor Device';
  }

  if( banner == "220 FTP service ready." ) {
    set_kb_item( name:"ftp/huawei/vrp/detected", value:TRUE );
    guess += '\n- Huawei Versatile Routing Platform (VRP)';
  }

  if( banner == "220 KONICA MINOLTA FTP server ready." ) {
    set_kb_item( name:"ftp/konicaminolta/printer/detected", value:TRUE );
    guess += '\n- KONICA MINOLTA Printer';
  }

  if( banner == "220 Welcome to Linksys" ) {
    set_kb_item( name:"ftp/linksys/detected", value:TRUE );
    guess += '\n- Linksys Device';
  }

  if( banner =~ "220 FTP Server \((ZyWALL )?USG ?(FLEX )?[0-9]+(W?(-VPN)?)?\)" ) {
    set_kb_item( name:"ftp/zyxel_usg/detected", value:TRUE );
    guess += '\n- Zyxel USG Device';
  }

  if( banner =~ "220 FTP Server \(VPN[0-9]+\)" ) {
    set_kb_item( name:"ftp/zyxel_vpn_firewall/detected", value:TRUE );
    guess += '\n- Zyxel VPN Firewall Device';
  }

  if( banner =~ "220 FTP Server \(ATP[0-9]+\)" ) {
    set_kb_item( name:"ftp/zyxel_atp_firewall/detected", value:TRUE );
    guess += '\n- Zyxel ATP Firewall Device';
  }

  if( banner =~ "220 FTP Server \(NXC[0-9]+\)" ) {
    set_kb_item( name:"ftp/zyxel_nxc/detected", value:TRUE );
    guess += '\n- Zyxel NXC Device';
  }

  if( banner =~ "220 FTP Server \(UAG[0-9]+\)" ) {
    set_kb_item( name:"ftp/zyxel_uag/detected", value:TRUE );
    guess += '\n- Zyxel UAG Device';
  }

  if( banner =~ "220 .*FTP Server \(OEM FTPD version" ) {
    set_kb_item( name:"ftp/epson/printer/detected", value:TRUE );
    guess += '\n- Epson Printer';
  }

  if( banner =~ "220 SHARP .*FTP Server" ) {
    set_kb_item( name:"ftp/sharp/printer/detected", value:TRUE );
    guess += '\n- SHARP Printer';
  }

  if( banner =~ "220 EFI FTP Print server" ) {
    set_kb_item( name:"ftp/efi/printer/detected", value:TRUE );
    guess += '\n- EFI Printer System';
  }

  if( banner =~ "220 (TASKalfa|ECOSYS)" ) {
    set_kb_item( name:"ftp/kyocera/printer/detected", value:TRUE );
    guess += '\n- Kyocera Printer';
  }

  if( banner =~ "220 Dell .*(Laser|MFP|Printer)" ) {
    set_kb_item( name:"ftp/dell/printer/detected", value:TRUE );
    guess += '\n- Dell Printer';
  }

  if( banner =~ "220\-Security Notice" &&
      banner =~ "220\-You are about to access a secured resource." ) {
    set_kb_item( name:"ftp/progress_moveit_transfer/detected", value:TRUE );
    guess += '\n- Progress MOVEit Transfer';
  }

  # nb: Default banner:
  #
  # 220 pCOWeb11268C FTP server (GNU inetutils 1.3.2) ready.
  # 220 pCOWeb FTP server (GNU inetutils 1.3.2) ready.
  #
  # nb: STAT banner, a few live devices only provided this:
  #
  # 211- pCOWeb916E96 FTP server status:
  #   ftpd (GNU inetutils) 1.9.4
  #
  # while the "normal" banner was just:
  #
  # 220 FTP server (GNU inetutils 1.9.4) ready.
  if( egrep( pattern:"pCOWeb[^ ]* FTP server.+ready\.", string:banner, icase:FALSE ) ||
      egrep( pattern:"pCOWeb[^ ]* FTP server status:", string:stat, icase:FALSE ) ) {
    set_kb_item( name:"ftp/carel/pcoweb/detected", value:TRUE );
    guess += '\n- CAREL pCOWeb Device';
  }

  # 220 Welcome to Netman FTP service.
  if( "Welcome to Netman FTP service." >< banner ) {
    set_kb_item( name:"ftp/riello/netman_204/detected", value:TRUE );
    guess += '\n- Riello UPS / NetMan 204 Device';
  }

  # 220 Welcome to Honeywell Printer PX4ie
  if( "Welcome to Honeywell Printer" >< banner ) {
    set_kb_item( name:"ftp/honeywell/printer/detected", value:TRUE );
    guess += '\n- Honeywell Printer';
  }

  # 220 CrushFTP Server Ready!
  if( "CrushFTP Server Ready" >< banner ) {
    set_kb_item( name:"ftp/crushftp/detected", value:TRUE );
    guess += '\n- CrushFTP';
  }

  # 220 AP7900 Network Management Card AOS v3.9.2 FTP server ready.
  if( banner =~ "AP[0-9A-Z]+ Network Management Card AOS" ) {
    set_kb_item( name:"ftp/apc/ups/detected", value:TRUE );
    guess += '\n- APC UPS / Network Management Card';
  }

  # 220 Bitvise SSH Server 9.32
  # 220 Bitvise SSH Server 9.32: free only for personal non-commercial use
  # 220 Bitvise SSH Server 8.43
  # 220 Bitvise SSH Server
  #
  # nb: Keep the pattern "in sync" with gb_ftp_os_detection.nasl and gsf/gb_bitvise_ssh_server_ftp_detect.nasl
  if( banner =~ "220[- ]Bitvise SSH Server" ) {
    set_kb_item( name:"ftp/bitvise/ssh_server/detected", value:TRUE );
    guess += '\n- Bitvise SSH Server';
  }

  report = 'Remote FTP server banner:\n\n' + banner;
  if( strlen( guess ) > 0 )
    report += '\n\nThis is probably (a):\n' + guess;

  if( syst && egrep( pattern:"^215 .+", string:syst ) )
    report += '\n\nServer operating system information collected via "SYST" command:\n\n' + syst;

  if( stat && egrep( pattern:"^211 .+", string:stat ) )
    report += '\n\nServer status information collected via "STAT" command:\n\n' + stat;

  log_message( port:port, data:report );
}

exit( 0 );