Home page logo
/
Intro Reference Guide Book Install Guide
Download Changelog Zenmap GUI Docs
Bug Reports OS Detection Propaganda Related Projects
In the Movies In the News

File ftp-brute

Download: http://nmap.org/svn/scripts/ftp-brute.nse

User Summary

Tries to get FTP login credentials by guessing usernames and passwords.

This uses the standard unpwdb username/password list. However, in tests FTP servers are significantly slower than other servers when responding, so the number of usernames/passwords can be artificially limited using script-args.

2008-11-06 Vlatko Kosturjak <kost@linux.hr> Modified xampp-default-auth script to generic ftp-brute script

2009-09-18 Ron Bowes <ron@skullsecurity.net> Made into an actual bruteforce script (previously, it only tried one username/password).

Script Arguments

limit

Set userlimlt + passlimit at the same time.

passlimit

The number of passwords to try (default: unlimited).

userlimit

The number of user accounts to try (default: unlimited).

passdb, userdb

See the documentation for the unpwdb library.

Script Output

PORT   STATE SERVICE REASON
21/tcp open  ftp     syn-ack
|  ftp-brute:
|  |  anonymous: IEUser@
|_ |_ test: password

Requires


categories auth intrusive

author Diman Todorov, Vlatko Kosturjak, Ron Bowes

copyright © Same as Nmap--See http://nmap.org/book/man-legal.html



Nmap Site Navigation

Intro Reference Guide Book Install Guide
Download Changelog Zenmap GUI Docs
Bug Reports OS Detection Propaganda Related Projects
In the Movies In the News
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]