Print

[erikk]

Hi Guys,

i tried to ftp my xbox 360 with the givin ip adress from my router.
my ftp client want connect but i need a username and password.
so i think the xbox 360 has an integrated ftp server.

so far... please test it for your self!

[DaBiscuit]

Yes, I will get to trying the several billion combinations of username and pass at random. Unfortunately, by the time I am done, there will be a nice 5-wire modchip that allows Live! access, a softmod, and a new generation of X-Box.

Having said that, there's a small chance you discovered something usefull. What would help is if you could possibly post the log of your FTP software.

NB: Since the dashboard and/or system software doesn't appear to be stored on the part of the HDD that is reserved for our use, this may be pointless anyway.

[lordvader129]

even if you do get in theres no guarantee you will have any access to anything, you might just have read access to a blank folder, you might only have view access to gamesaves, you might have read/write access to a stored media folder (that would actually be pretty neat there)

most likely it wont have any read/write access to anything though

[ViNCe_V]

I tried to FTP into my 360, and it didn't work. I even ran a port scan, there doesn't seem to be any open ports on it.... You were able to connect to the Xbox 360 via port 21? Could you provide a little bit more details on what you did?

[iLLNESS]

i call b$

[CattyKid]

I will try his message, and although I'm pretty sure it doesn't work, there may be some validity to at least his rationale.

[The Anarchist]

use a bit of software called brutus to find a matching username and password (this may take from hours to weeks)

[CattyKid]

Okay.  Looks like I can't ping the son of a peachbasket while streaming a song from my computer or not streaming (with Windows Connect).  However, the NETSTAT command in the command prompt shows this:
192.168.1.102:22919
and the state in ESTABLISHED


Hmmm.  Makes you think, huh.
Oh, and FTP doesn't work for me, at all.

QUOTE(The Anarchist @ Dec 13 2005, 04:04 PM)

use a bit of software called brutus to find a matching username and password (this may take from hours to weeks)

I have to call BS on that prompt coming up, read my post above.

[ViNCe_V]

QUOTE(CattyKid @ Dec 13 2005, 10:05 PM)

Okay.  Looks like I can't ping the son of a peachbasket while streaming a song from my computer or not streaming (with Windows Connect).  However, the NETSTAT command in the command prompt shows this:
192.168.1.102:22919
and the state in ESTABLISHED
Hmmm.  Makes you think, huh.

Well, the netstat just shows connections to your computer, so doesn't really give any sign of an open port on the 360. And I'm starting to believe more and more that this whole FTP thing is BS. Why would M$ make a FTP server built in? Why spend so much time on security, and leave a way to log into the box? Haha, mmmmkay.

[rohan_ch]

I think I read somewhere that you have to load up a game (or was it Xbox Live?) for port 21 to appear open. Not sure if it allows FTP access though.

This post has been edited by rohan_ch: Dec 13 2005, 11:03 PM

[sp3cialk]

you guys that are scanning... just curious to what apps you are using?? sounds like the run of the mill port scanners, etc... you know when you connect to your pc for streaming it gives you a key to enter in the media connect or the media center software... has anyone ran something like Cain while setting up a connection and then maybe after when streaming and see if something similar to that key is passed???

[ViNCe_V]

QUOTE(rohan_ch @ Dec 13 2005, 11:09 PM)

I think I read somewhere that you have to load up a game (or was it Xbox Live?) for port 21 to appear open. Not sure if it allows FTP access though.

Test 1: Not Signed into Xbox Live at Dashboard --- open ports: 25 (smtp), 110 (pop3), 1030 (?)

Test 2: Signed Into Xbox Live at Dashboard --- open ports: 25 (smtp), 110 (pop3), 1030 (?)

Test 3: PGR 3 in Xbox Live Match --- open ports: 25 (smtp), 110 (pop3)

Test 4: PGR 3 at Main Menu --- open ports: 25 (smtp), 110 (pop3)

Test 5: Watching TV using Media Center on 360 --- open ports: 25 (smtp), 110 (pop3), 35091 (?)

Telneting into any of these ports actually works, although the ports 25+110 present a blank, black window and port 35091 presents 2 symbols upon login. The port 1030 on the dashboard changes. When I ran the scan again, it gave me 1046, running it once more after rebooting gave me 1026. So, that one seems to be a wildcard. I take it that the two static ports are used to send messages and notifications from Xbox Live.

QUOTE(sp3cialk @ Dec 13 2005, 11:14 PM)

you guys that are scanning... just curious to what apps you are using?? sounds like the run of the mill port scanners, etc... you know when you connect to your pc for streaming it gives you a key to enter in the media connect or the media center software... has anyone ran something like Cain while setting up a connection and then maybe after when streaming and see if something similar to that key is passed???

The key I think is only necessary to allow the Xbox 360 to connect to your PC. I think it serves little more than a login, which I will monitor network traffic for to see. For port scanning, I am using a freeware utility called LAN Scanner.

Monitoring the network traffic as the Xbox 360 attempts to connect to a PC is interesting. It produced ~126,000 lines of hex in about 25 seconds. The ones of particular interest occur right at the beginning:

CODE

..^.....Z?&...E.
.._......0...h..
.....l..A.NOTIFY
 * HTTP/1.1..HOS
T:239.255.255.25
0:1900..NT:urn:s
chemas-MS
-com:nhed:presen
ce:1..NTS: ssdp:
byebye..LOCATION
:*..USN:uuid:000
00000-0000-0000-
0200-00125A3F26C
6::urn:schemas-m
icrosoft-com:nhe
d:presence:1....
.


..^.....Z?&...E.
.._..........h..
.....l....NOTIFY
 * HTTP/1.1..HOS
T:239.255.255.25
0:1900..NT:urn:s
chemas-MS
-com:nhed:presen
ce:1..NTS:ssdp:a
live..LOCATION:*
..CACHE-CONTROL:
max-age=4..AL:rn:schemas-micro
soft-com:nhed:at
tributes?type=X0
2&firmwarever=22
41.0&udn=uuid:10
000000-0000-0000
-0200-00125A3F26
C6&modelname=Xbo
x%20360&DvcFN=Xb
ox%20360&vendori
d=1118&productid
=2&hwrev=200&swr
ev=2&language=EN
-US&manufacturer
=MS&image
headerver=107393
7208&affcode=722
>crosoft-com:nhed
:download-target
?address=192.168
.1.104&port=1028
>..USN:uuid:0000
0000-0000-0000-0
200-00125A3F26C6
::urn:schemas-mi
crosoft-com:nhed
:presence:1..SER
VER:dashboard/1.
0 UpnP/1.0 xbox/
2.0.....

[erikk]

i dont know which port it is...

i use on my mac: connect to server... (in finder)
there ftp://ipofmyxbox360
3 seconds later a new window open, where i have to fill in username and password.

when anybody can tell me, how i can do a portscan on osx tiger, then i try this and tell u the port.

[ViNCe_V]

QUOTE(erikk @ Dec 14 2005, 01:34 AM)

i dont know which port it is...

i use on my mac: connect to server... (in finder)
there ftp://ipofmyxbox360
3 seconds later a new window open, where i have to fill in username and password.

when anybody can tell me, how i can do a portscan on osx tiger, then i try this and tell u the port.

Using ftp:// when connecting to a ftp server uses the default port for FTP's, port 21. But, according to all my tests, that port is never opened up on the Xbox 360. Why don't you describe in detail exactly what your Xbox 360 is doing when you try to FTP into it. Like, are you listening to music in the Media tab, etc. As far as I can tell, only ports 25 and 110 remain open. A port in the 1000 range opens up when you are at the dashboard, and a port like 35091 opens up when you are in the Media Center. All of these ports do not ask for a login or password when connecting via FTP. So, this leads me to again think why in the hell would m$ add in a ftp server, and also that you are full of sh*t  

[erikk]

hey lady...

i do nothing with my box... i m not signed in live, only the dashboard is open.

what happens when you connect without any ftp software? like internet explorer or else... a programm where you never fill in a port.

i dont know what happend in my network, i get a window where i have to fill my name and a password.

has anybody a mac system and try the same like me?

it is possible, that the connection for my mac dont know which protocol it use until i have the right name and password for example? so for example he try to connect at first only the ip, without any ftp, http or else?