mirror of https://github.com/OWASP/Nettacker.git
41 lines
825 B
YAML
41 lines
825 B
YAML
info:
|
|
name: ftps_brute
|
|
author: OWASP Nettacker Team
|
|
severity: 3
|
|
description: FTPS Bruteforcer
|
|
reference:
|
|
profiles:
|
|
- brute
|
|
- ftp
|
|
|
|
payloads:
|
|
- library: ftps
|
|
steps:
|
|
- method: brute_force
|
|
timeout: 3
|
|
host: "{target}"
|
|
ports:
|
|
- 990
|
|
usernames:
|
|
- root
|
|
- admin
|
|
- user
|
|
- test
|
|
- anonymous
|
|
passwords:
|
|
nettacker_fuzzer:
|
|
input_format: '{{passwords}}'
|
|
prefix:
|
|
suffix:
|
|
interceptors:
|
|
data:
|
|
passwords:
|
|
read_from_file: passwords/top_1000_common_passwords.txt
|
|
response:
|
|
condition_type: or
|
|
conditions:
|
|
successful_login:
|
|
regex: ""
|
|
reverse: false
|
|
|