During a penetration test, I need to enumerate users and shared files on an FTP server without causing harm or raising alarms. What are the safest methods or tools to perform FTP enumeration, and how can I ensure that my actions remain ethical and within scope?
Examples of FTP commands or enumeration tools like ftp or nmap would be valuable.