Hacking FTP Servers using Brute Force Attack

What is FTP (File Transfer Protocol)?

The File Transfer Protocol (FTP) is a standard network protocol used to transfer computer files from one host to another host over a TCP-based network, such as the Internet. FTP is built on a client-server architecture and uses separate control and data connections between the client and the server. FTP users may authenticate themselves using a clear-text sign-in protocol, normally in the form of a username and password, but can connect anonymously if the server is configured to allow it. For secure transmission that protects the username and password, and encrypts the content, FTP is often secured with SSL/TLS (FTPS).

What is Brute Force Attacking?

Brute force is about overpowering the computer's defenses by using repetition. In the case of password hacking, dictionary attacks involve dictionary software that recombines English dictionary words with thousands of varying combination. Brute force dictionaries always start with simple letters "a", "aa", "aaa", and then eventually moves to full words like "dog", "doggie", "doggy". These brute force dictionaries can make up to 50 attempts per minute in some cases. Given several hours or days, these dictionary tools will overcome any password.

In this article, I will show you to how to Hack any FTP Server by using Brute Force Attack using two popular methods;

Method 1. Using Brutus AET2 (For Windows users)

Firstly download the Brutus AET2 tool from here, and extract it and then open it;

Now open victim's FTP address in any of your desired browser and check if its working or not;

If its working then now open up Brutus and enter the set up the following setting as shown in the below image;

1. Enter victim's FTP address in the Target field.
2. Change attack Type to FTP.
3. Users File has been settled in the application by default, you can also use any of yours.
4. Change Pass Mode to Brute Force.
5. Proxy is optional, to keep yourself anonymous then click and select the proxy and enter your proxy's details by clicking the Define button.
6. Click Start to start the attack on the target.

It will start the attack on the target, now wait for some time as it depends on the complexity and length of the password to overcome on it.

Method 2. Using Hydra (For Kali Linux users)

First of all you need to have a running and logged in Kali Linux operating system, Also see How to Install Kali Linux on Virtual Machine;

Now open victim's FTP address in any of your desired browser and check if its working or not;

If its working then now then open up Terminal and write xhydra and hit Enter;

After hitting Enter, xHydra window will open change its setting as shown in the below image;

1. Enter victim's FTP address.
2. Enter FTP port, which is 21.
3. Select Protocol to ftp.
4. Check Show Attempts, so you can see the whole password cracking progress.
5. Click on the Passwords tab.

Now in the Password Tab, change its setting as shown in the below image;

1. If you know victim's user name then you can write it in the Username field, otherwise you can use your Username list.

2. If you know victim's password then you can write it in the Password field, otherwise you can use your Password list.

3. Click in Tuning tab.

Now in the Tuning tab, you can configure the proxy setting according to yourself to keep yourself anonymous while attacking otherwise leave it blank.

Now click Start tab and click Start in it to start the attack on the target address.

After starting the attack on the target, now wait for some time as it depends on the complexity and length of the password to overcome on it.

Note: Do Not Use Any Tutorial Of This Blog To Harm Anyone. This Is Only For Educational Purpose. I Will Not Be Responsible For Anything Done By You.

Do you my like Articles..?