FTPBuster

FTPBuster is a powerful command-line brute-forcing tool designed to brute-force FTP, SFTP, and explicit FTPS servers by performing dictionary-based attacks. It is intended for ethical hacking and penetration testing

Features

• Brute-force support for FTP, SFTP, and explicit FTPS (AUTH TLS only)
• Supports single username/password and username/password wordlists
• Real-time progress: tried, remaining, speed, elapsed time, ETA
• Optional option to save valid credentials to a file
• Multithreaded for speed (maximum threads: 50 for better accuracy)
• Automatically handles UTF-8 encoded wordlists, with fallback to Latin-1 if UTF-8 fails

⚠️ Legal Disclaimer

FTPBuster is intended for educational and authorized security testing purposes only. Unauthorized use of this tool against systems without explicit permission is illegal and strictly prohibited. The author is not responsible for any misuse, damage, or legal consequences resulting from the use of this tool.

Requirements

• Python 3.x
• paramiko library

Install dependencies:

pip3 install paramiko

Note for Kali, Parrot, Ubuntu 23.04+, Arch Linux users:

If you see an error like:

error: externally-managed-environment

then use:

pip3 install paramiko --break-system-packages

Compatibility

Linux (Debian, RHEL, Arch, etc.)

installation

1. Clone the Repository

git clone https://gitlab.com/s_r_e_e_r_a_j/FTPBuster.git

2. Navigate to the FTPBuster directory

cd FTPBuster

3. Run Installer

sudo python3 install.py

then type y for install

4. Run the tool

ftpbuster [options]

Required Arguments

You must provide either a wordlist or a single value for both username and password.

Optional Arguments

Examples

FTP with wordlists

ftpbuster -t 192.168.1.5 -P FTP -u /home/kali/Desktop/users.txt -p /home/kali/Desktop/passwords.txt

SFTP with single username

ftpbuster -t 192.168.1.5 -P SFTP --user root -p /home/kali/Desktop/passwords.txt

FTPS with output file

ftpbuster -t ftp.example.com -P FTPS -u /home/kali/Desktop/user.txt -p /home/kali/Desktop/pass.txt --outfile /home/kali/Desktop/valid.txt

Uninstallation

Run the install.py script

sudo python3 install.py

Then Type n for uninstall

License

This project is licensed under the GNU General Public License v3.0