Advanced FTP Scanner with Vulnerability Detection & Exploitation
- 📖 Description
- ✨ Features
- 🛠️ Installation
- 🚀 Usage
- 📊 Operation Modes
- 🔧 Configuration
- 📁 Output Files
- 🎯 Attack Strategies
⚠️ Legal Disclaimer- 📈 Statistics
- 🤝 Contribution
- 📝 License
FTP Brute Force Scanner is an advanced security tool designed to test the robustness of FTP servers. It combines multiple sophisticated techniques to identify vulnerabilities and configuration weaknesses.
This tool is intended ONLY for educational purposes and authorized penetration testing.
| Feature | Description | Status |
|---|---|---|
| Intelligent Brute Force | Smart password generation based on domain | ✅ |
| Subdomain Detection | Automatic FTP subdomain discovery | ✅ |
| Buffer Overflow | Vulnerability detection and exploitation | ✅ |
| Automatic Upload | Shell upload after successful login | ✅ |
| Shell Saving | Automatic shell URL recording | ✅ |
| Multi-threading | High-performance parallel scanning | ✅ |
| GUI Interface | Intuitive graphical interface | ✅ |
- Smart password generation (300+ combinations)
- vsFTPd 2.3.4 backdoor detection
- Priority anonymous access testing
- Domain information extraction
- High probability combinations
- Keyboard patterns and leet speak
- Intelligent anti-blocking delays
# Python 3.6 or higher
python --version
# Install dependencies
pip install -r requirements.txt# For graphical interface
pip install PyQt5
# For HTTP testing
pip install requests
# For secure connections
pip install urllib3# Clone the repository
git clone https://github.com/HackfutSec/ftp-bruter_exploit.git
cd ftp-bruter_exploit
# Installation
chmod +x install.sh
./install.sh
# Or manual installation
pip install -r requirements.txt# Basic usage
python ftp_bruteforce.py targets.txt
# Single host
echo "ftp.example.com" > targets.txt
python ftp_bruteforce.py targets.txt# Accepted format
ftp.example.com
ftp.example.com:21
192.168.1.1
192.168.1.1:2121
# Launch graphical interface
python ftp_bruteforce.pypython ftp_bruteforce.py <targets_file.txt>python ftp_bruteforce.pyThe scanner automatically executes:
- FTP active verification
- Subdomain discovery
- Buffer Overflow vulnerability testing
- Anonymous access testing
- Intelligent brute force
- Shell upload
| File | Description | Format |
|---|---|---|
targets.txt |
Target list | One per line |
proxies.txt |
Proxy list | IP:PORT |
admin.php |
Shell to upload | PHP |
# In the code
MAX_WORKERS = 25 # Number of threads
RESULTS_FILE = "Cracked_FTP.txt" # Results file
TIMEOUT = 10 # Connection timeout
MAX_ATTEMPTS = 200 # Maximum attempts| File | Content | Description |
|---|---|---|
Cracked_FTP.txt |
Found credentials | Successful connection results |
Active_FTP.txt |
Active servers | Accessible FTP |
Upload_Results.txt |
Upload logs | Download results |
Discovered_Subdomains.txt |
Subdomains | DNS discoveries |
Buffer_Overflow_Vulns.txt |
Vulnerabilities | Detections and exploits |
shell.txt |
Shell URLs | Uploaded shells |
admin.php |
PHP Shell | File manager |
Most common predefined combinations
- admin:admin
- root:root
- ftp:ftp
- test:testGeneration from domain name
- domain:domain123
- admin@domain
- ftp@domainSequences and years
- 123456, 2024, admin2024
- 111111, 000000Character substitutions
- admin → 4dm1n
- password → p4ssw0rdKeyboard sequences
- qwerty, asdfgh
- 1qaz2wsx✅ FTP scan completed!
📊 FINAL: 15/50 successful (30.0%) in 45.2s
🌐 SUBDOMAINS: 8 FTP subdomains discovered
💥 BUFFER OVERFLOW: 2 vulnerable, 1 exploited
📤 UPLOADS: 12 successful uploads (80.0% of successes)
🐚 SHELLS: 10 shell URLs saved to shell.txt
- ✅ Success rate
- 🌐 Discovered subdomains
- 💥 Exploited vulnerabilities
- 📤 Successful uploads
- 🐚 Saved shells
⚠️ IMPORTANT WARNING ⚠️
This tool is provided ONLY for educational purposes and
AUTHORIZED penetration testing.
Using this tool against systems without explicit
authorization is ILLEGAL.
The author is NOT responsible for malicious use
of this tool.
Use this tool only on:
- Your own systems
- Systems with written permission
- Testing environments
Contributions are welcome!
- Fork the project
- Create a branch (
git checkout -b feature/AmazingFeature) - Commit your changes (
git commit -m 'Add some AmazingFeature') - Push to the branch (
git push origin feature/AmazingFeature) - Open a Pull Request
Use Issues to report bugs.
MIT License
Copyright (c) 2024 HackfutSec
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
If this project was helpful, don't forget to:
⭐ Star the repository
🔔 Watch for updates
🍴 Fork to contribute
📢 Share with the community
Telegram: @HackfutS3c Telegram Channel LinxProdx GitHub: HackfutSec
Developed with ❤️ by @HackfutS3c
- ✅ Added Buffer Overflow detection and exploitation
- ✅ Added subdomain discovery
- ✅ Added automatic shell saving
- ✅ Improved password generation (300+ combinations)
- ✅ Enhanced GUI with new features
- ✅ Fixed multiple bugs and errors
- ✅ Improved error handling
- ✅ Added proxy support
- ✅ Added automatic admin.php upload
- ✅ Improved brute force strategies
- ✅ Added domain-based password generation
- ✅ Added GUI interface
- ✅ Added multi-threading support
- ✅ Improved connection handling
- ✅ Initial release
- ✅ Basic FTP brute force
- ✅ Console interface
This tool is excellent for learning about:
- Network Security: Understanding FTP vulnerabilities
- Penetration Testing: Learning testing methodologies
- Python Programming: Advanced threading and networking
- Security Research: Vulnerability discovery
- Ethical Hacking: Responsible disclosure practices
If you discover a vulnerability using this tool:
- Do NOT exploit it maliciously
- DO report it responsibly
- Contact the system owner
- Document your findings
- Follow responsible disclosure practices
Remember: With great power comes great responsibility
Use this tool ethically and legally