Open Source Security Atlas

CrackFtp: An Open Source Tool for Application Security | Open Source Security Atlas

Back to Browse

Application Security

Tool

CrackFtp

CrackFtp is a mass FTP checker and cracker that tests login credentials and sends Telegram alerts on successful logins.

View on GitHub

About This Tool

This script is a mass FTP checker and cracker, designed to test login credentials and alert on successful logins to secure domains, with Telegram notifications.

Primary Use Case

CrackFtp is designed for ethical hackers and security professionals to test the integrity of FTP credentials across multiple servers. It helps identify valid login credentials and alerts users via Telegram, enhancing incident response and authentication system security.

Key Features

Mass FTP Checking
Brute-Force Capability
Telegram Notifications
Command-Line Interface
Cross-Platform

Insights & Recommendations

Ensure Python is installed before running the installation steps. Set up a Telegram bot for notifications as described in the README.

Installation

Clone the Repository: git clone https://github.com/DevJinma/CrackFtp.git
Navigate to the directory: cd CrackFtp
Install Dependencies: pip install -r requirements.txt
Download the Latest Release from the releases page

Usage

python crackftp.py --target <ftp_server> --user <username_file> --pass <password_file>

Attempts to log in to the specified FTP server using the provided username and password files.

python crackftp.py --target ftp.example.com --user users.txt --pass passwords.txt

Example command to test login credentials on ftp.example.com using users.txt and passwords.txt.

Smart Usage Notes

Repurposing: Beyond FTP, CrackFtp can be adapted to test other protocol-based authentication systems by modifying the script to handle different protocols such as SSH or SMTP.
Chaining: Combine CrackFtp with network scanning tools like Nmap to first identify active FTP services before launching credential tests, optimizing the attack surface.
Evasion/Detection: Attackers might bypass CrackFtp by using VPNs or proxy chains to obfuscate their source IP. Detection can be enhanced by monitoring for unusual login patterns or failed login attempts.
Data Fusion: Integrate CrackFtp's output with SIEM systems to correlate successful login attempts with other network anomalies, enhancing threat intelligence.
Automation: Automate the deployment of CrackFtp in a CI/CD pipeline to regularly test FTP credentials as part of security assessments, ensuring continuous monitoring and rapid response.