SO my dumb ass ran babyFTP in windows 11 with all permissions without switching from home network to mesh network. everything was normal until my transfer suddenly stopped and when I went to restart the server it said "7 connections terminated" lenin-dont-laugh

SO what now? it had a browser vault and what I assume are decrypted emails via the Microsoft mail.

Should I dd it and do forensics as to what ran in powershell and what files changed most recently?

Nuke and pave?

is EVERY password in that browser vault burned?

  • PaX [comrade/them, they/them]
    ·
    edit-2
    8 months ago

    Yeah, the safe path is to nuke the machine and consider all passwords compromised

    What do you mean by "without switching from home network to mesh network"? What network was the system connected to? Also if you had a transfer running some FTP clients will open multiple connections to the server which could explain your "7 connections terminated" message. Can you check the FTP server logs to see what exactly happened?