Java FTP Injection http://blog.blindspotsecurity.com/2017/02/advisory-javapython-ftp-injections.html ftp://foo:bar%0d%[email protected]/file.png inject malisous code by using return code(%0d%0a)