Description

Detects the use of insecure FTP client implementations that transmit data in plaintext without TLS encryption. This vulnerability could allow attackers to intercept sensitive data through network sniffing since FTP transfers credentials and data without encryption.

Detection Strategy

• Identifies direct usage or instantiation of FTP clients in C# code

• Specifically detects when 'FtpClient' class is used without secure configuration

• Reports a vulnerability when FTP connections are created without TLS/encryption settings

Vulnerable code example

using System.Net;
using System.Net.FtpClient;

public class FtpConnection {
    public void Connect() {
        var client = new FtpClient();
        client.Host = "localhost";
        client.Credentials = new NetworkCredential("ftptest", "ftptest"); // Vulnerable: Hardcoded credentials expose sensitive data...

✅ Secure code example

using System.Net;
using System.Net.FtpClient;
using System.Configuration;

public class FtpConnection : IDisposable
{
    private readonly FtpClient _client;
...