Description
FP协议也称Apple文件协议、Apple归档协议，以前称为AppleTalk Filing Protocol，它是一个专有网络协议，并且是Apple File Service的一部分，为macOS和经典Mac OS提供文件服务。
当攻击者通过未授权访问漏洞连接到AFP服务后，可对该服务上全部文件进行增删改查等敏感操作，导致数据泄露、丢失。
Apple Filing Protocol(AFP) 未授权访问漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=21138
https://exchange.xforce.ibmcloud.com/vulnerabilities/28136
https://hacktricks.wiki/en/network-services-pentesting/584-pentesting-afp.html
https://www.macos.utah.edu/documentation/security/vulnerabilities_and_solutions/apple_filing_protocol_guest_access_enabled.html
https://www.kb.cert.org/vuls/id/168020
https://www.malwarebytes.com/blog/news/2022/04/qnap-customers-urged-to-disable-afp-to-protect-against-severe-vulnerabilities
https://www.verylazytech.com/network-pentesting/apple-filing-protocol-afp-port-548
https://nvd.nist.gov/vuln/detail/CVE-2010-1820
https://medium.com/tenable-techblog/exploiting-an-18-year-old-bug-b47afe54172