Sunday, 22 January 2017

Metasploit Tutorial - 3 (hacking FTP login)

In this video we will see how to find open ports and hack the FTP login with wordlist and Metasploit
Using Metasploit to hack FTP login

Steps and instructions - 

FTP open ports are very delicious for hackers. Though not get to see open these days.

Metasploit - The hackers framework tool.

FTP port - The FTP, or the File Transfer Protocol, makes it possible for users to exchange files between their personal computers and remote servers with the help of specialized software tools called FTP clients.

Requirements for this hack - 

* Kali Linux
* Metasploit (inbuilt in Kali)
* Password and User name lists (available here and here)

Note - You can use any wordlist, as you require. It depends on the target.

Steps - 

* Open a terminal and type "msfconsole" to run metasploit 

* After you get the console, we need to scan open ports with NMAP.

Type "nmap -F -Pn targetIP"

As you can see that we have caught a open port which is FTP.

* Now we need to search a good exploit for the FTP login.

Type in "search ftp"

(It will load slowly)

We will get a hell lot of modules and auxiliaries.

I know a perfect auxiliary for this.

So we will search "search ftp_login"

You will get only one auxiliary after this search.

If you want to see more info about this auxiliary, type "info auxiliary/scanner/ftp/ftp_login"

You can read and explore this info.

But today we will use this exploit.

* Type in "use auxiliary/scanner/ftp/ftp_login"

Lets see the options of this auxiliary (requires to set up)

Type "show options"

As you can see, we need to set up the options here.

To set the target type - "set RHOSTS targetIP"

To set threads type - "set THREADS 30"

To set the username - "set USERNAME root"

(You can use username as you want, I have shared the username list in requirements above)

Or you can give the path to the username list.

Here is the username list I am using 

The setup for the options 

After setting up the RHOSTS, THREDS and USERNAME, we will give the path of the password file which I have saved on the Desktop.

Type "set PASS_FILE Desktop/Password List.txt"

Note - Deskto/ is the path

Password List.txt is the file name.

This is my password list 

Everything is ready, just type "run"

And the password cracking will start.

Note - The tab for every tried password is red. That's because the password is incorrect.

When it hits the right password the tab will go green and will not stop until it finishes the whole wordlist.

Press ctrl+c to stop at anytime.

If you are not getting the right login, you may need to change the username to something other like admin or administrator if you haven't given the username list path as I had given only one name manually.

This process can take a lot of time. It depends upon the wordlist, username, internet speed and you social engineering skills.

After you get the user name and password you can access the FTP server and exploit or do what ever you want to do man, but don't trouble your mother man.

Thank you guys for reading the tutorial.

I have made a set of Metasploit Tutorials from the beginning. You may want to see them here.

Other posts - 


  1. I get a lot of great information here and this is what I am searching for. Thank you for your sharing. I have bookmark this page for my future reference. Search aws jobs in hyderabad.

    1. Hi, Great.. Tutorial is just awesome..It is really helpful for a newbie like me.. I am a regular follower of your blog. Really very informative post you shared here. Kindly keep blogging. If anyone wants to become a Front end developer learn from Javascript Training in Chennai . or learn thru Javascript Training in Chennai. Nowadays JavaScript has tons of job opportunities on various vertical industry. JavaScript Training in Chennai

  2. I very much enjoyed this article.Nice article thanks for given this information. i hope it useful to many pepole.morephp jobs in hyderabad.

  3. Hi, Great.. Tutorial is just awesome..It is really helpful for a newbie like me.. I am a regular follower of your blog. Really very informative post you shared here. Kindly keep blogging. If anyone wants to become a Java developer learn from Java Training in Chennai. or learn thru Java Online Training in India . Nowadays Java has tons of job opportunities on various vertical industry.

    or Javascript Training in Chennai. Nowadays JavaScript has tons of job opportunities on various vertical industry.

  4. • Nice and good article. It is very useful for me to learn and understand easily. Thanks for sharing your valuable information and time. Please keep updatingAzure Online course hyderabad

  5. Man as I type run it says "Auxiliary failed: Msf::OptionValidateError The following options failed to validate: RHOSTS".

  6. Hello! This is my first visit to your blog! We are a team of volunteers and starting a new initiative in a community in the same niche. Your blog provided us useful information to work on. You have done an outstanding job.
    Best AWS Training in Chennai | Amazon Web Services Training in Chennai
    Best AWS Amazon Web Services Training Course in Bangalore | Amazon Web Services AWS Training in Bangalore
    AWS Online Training and Certification | Online AWS Certification Course - Gangboard

  7. Play online casino where you can win, come in and get your win top casino slot machines catch luck until you disappear.

  8. Знаю где продается отличная rgb лента, покупал у них недавно, нареканий нет, компания называется Ekodio

  9. such an great post and amazing tips about it because i like it and thank you. keep it up.
    For Premium Accounts at cheap rate check this site premium Accounts Seller

    Netflix premium account -- Netflix premium Account

    Premium Accounts at cheap -- Hotstar premium Account

    Hotstar premium account -- Hotstar premium Account

  10. I finally found great post here.I will get back here. I just added your blog to my bookmark sites. thanks.Quality posts amazon web services training is the crucial to invite the visitors to visit the web page, that's what this web page is providing.

  11. Your work is very good and I appreciate you and hopping for some more informative postsAmazon web services bangalore

  12. It is one of the most important thing to consider before buying a folding kayak.

    Advanced Elements AE1007-R Convertible Kayak

  13. Really i found this article more informative, thanks for sharing this article! Also Check here

    Download and install Vidmate App which is the best HD video downloader software available for Android. Get free latest HD movies, songs, and your favorite TV shows

    Vidmate App Download

    Vidmate apk for Android devices

    Vidmate App

    download Vidmate for Windows PC

    download Vidmate for Windows PC Free

    Vidmate Download for Windows 10

    Download Vidmate for iOS

    Download Vidmate for Blackberry

    Vidmate For IOS and Blackberry OS

  14. You can get a bigger discount when you subscribe for more than 1 module and for a long period of time. The decision is up to you:

    free instagram followers instant

  15. Sell your house fast in Whitefish Bay and surrounding areas of Wisconsin… we’d like to make you a FAIR, competitive, all-cash offer.

    We Buy Houses Whitefish Bay WI

  16. All the Telugu knowers can enjoy their favorite anime videos on this site. Want to know about the types of films in the desired language? That’s good. On this website, you can watch any anime movie.


  17. Also, the Arabic people can watch their favorite characters movies in their desired language. It means you can watch love stories, romantic, action, horror, adventure, and other kinds of film in Arabic.


  18. Light weight, disposable valved particulate respirator. These respirators meet the requirements of EN149:2001 category FFP2 which protects the wearer from low-to-average toxicity solid and liquid aerosols


  19. As far as the application is concerned, it can be used to clean various appliances such as antiques, work tools, clocks, vehicles, and cookware. For some special needs, you chance its properties with the required process since this is a biodegradable product.

    CLR PRO Calcium Lime & Rust Remover