File ftp-brute
Download: http://nmap.org/svn/scripts/ftp-brute.nse
User Summary
Tries to get FTP login credentials by guessing usernames and passwords.
This uses the standard unpwdb username/password list. However, in tests FTP servers are significantly slower than other servers when responding, so the number of usernames/passwords can be artificially limited using script-args.
2008-11-06 Vlatko Kosturjak <kost@linux.hr> Modified xampp-default-auth script to generic ftp-brute script
2009-09-18 Ron Bowes <ron@skullsecurity.net> Made into an actual bruteforce script (previously, it only tried one username/password).
Script Arguments
limit
Set userlimlt + passlimit at the same time.
passlimit
The number of passwords to try (default: unlimited).
userlimit
The number of user accounts to try (default: unlimited).
passdb, userdb
See the documentation for the unpwdb library.Script Output
PORT STATE SERVICE REASON 21/tcp open ftp syn-ack | ftp-brute: | | anonymous: IEUser@ |_ |_ test: password
Requires
author Diman Todorov, Vlatko Kosturjak, Ron Bowes
copyright © Same as Nmap--See http://nmap.org/book/man-legal.html