Add code to FTP

vpereira · Nov 26, 2023 · ed7c2fd · ed7c2fd
1 parent 090846a
commit ed7c2fd
Show file tree

Hide file tree

Showing 5 changed files with 37 additions and 1 deletion.
diff --git a/go.mod b/go.mod
@@ -4,13 +4,16 @@ go 1.19
 
 require (
 	github.com/emersion/go-imap v1.2.0
+	github.com/jlaffaye/ftp v0.2.0
 	github.com/simia-tech/go-pop3 v0.0.0-20150626094726-c9c20550a244
 	github.com/sirupsen/logrus v1.8.1
 	golang.org/x/crypto v0.1.0
 )
 
 require (
 	github.com/emersion/go-sasl v0.0.0-20200509203442-7bfe0ed36a21 // indirect
+	github.com/hashicorp/errwrap v1.0.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
 	golang.org/x/sys v0.1.0 // indirect
 	golang.org/x/text v0.4.0 // indirect
 )
diff --git a/go.sum b/go.sum
@@ -6,14 +6,20 @@ github.com/emersion/go-message v0.15.0/go.mod h1:wQUEfE+38+7EW8p8aZ96ptg6bAb1iwd
 github.com/emersion/go-sasl v0.0.0-20200509203442-7bfe0ed36a21 h1:OJyUGMJTzHTd1XQp98QTaHernxMYzRaOasRir9hUlFQ=
 github.com/emersion/go-sasl v0.0.0-20200509203442-7bfe0ed36a21/go.mod h1:iL2twTeMvZnrg54ZoPDNfJaJaqy0xIQFuBdrLsmspwQ=
 github.com/emersion/go-textwrapper v0.0.0-20200911093747-65d896831594/go.mod h1:aqO8z8wPrjkscevZJFVE1wXJrLpC5LtJG7fqLOsPb2U=
+github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
+github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
+github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
+github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
+github.com/jlaffaye/ftp v0.2.0 h1:lXNvW7cBu7R/68bknOX3MrRIIqZ61zELs1P2RAiA3lg=
+github.com/jlaffaye/ftp v0.2.0/go.mod h1:is2Ds5qkhceAPy2xD6RLI6hmp/qysSoymZ+Z2uTnspI=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/simia-tech/go-pop3 v0.0.0-20150626094726-c9c20550a244 h1:izFQm9qRSp+dKUYciqiHfYnrpDNqDdiuecqGQryGlRU=
 github.com/simia-tech/go-pop3 v0.0.0-20150626094726-c9c20550a244/go.mod h1:3smecozaRWHAj4cDRRnlRPVb6O44N+3S7K45/C37HpU=
 github.com/sirupsen/logrus v1.8.1 h1:dJKuHgqk1NNQlqoA6BTlM1Wf9DOH3NBjQyu0h9+AZZE=
 github.com/sirupsen/logrus v1.8.1/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
-github.com/stretchr/testify v1.2.2 h1:bSDNvY7ZPG5RlJ8otE/7V6gMiyenm9RtJ7IUVIAoJ1w=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
+github.com/stretchr/testify v1.8.3 h1:RP3t2pwF7cMEbC1dqtB6poj3niw/9gnV4Cjg5oW5gtY=
 golang.org/x/crypto v0.1.0 h1:MDRAIl0xIo9Io2xV565hzXHw3zVseKrJKodhohM5CjU=
 golang.org/x/crypto v0.1.0/go.mod h1:RecgLatLF4+eUMCP1PoPZQb+cVrJcOPbHkTkbkB9sbw=
 golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -25,3 +31,4 @@ golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.4.0 h1:BrVqGRd7+k1DiOgtnFvAkoQEWQvBc25ouMJM6429SFg=
 golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
diff --git a/internal/connect/main.go b/internal/connect/main.go
@@ -8,6 +8,8 @@ import (
 	"sync"
 	"time"
 
+	"github.com/jlaffaye/ftp"
+
 	"github.com/emersion/go-imap/client"
 	"github.com/simia-tech/go-pop3"
 	"golang.org/x/crypto/ssh"
@@ -22,6 +24,27 @@ type Arguments struct {
 	Password string
 }
 
+// FTPBruteforce tries to authenticate against an FTP server.
+func FTP(wg *sync.WaitGroup, throttler <-chan int, output chan string, ca Arguments) {
+	defer wg.Done()
+
+	// Dial the FTP server
+	c, err := ftp.Dial(ca.Host, ftp.DialWithTimeout(5*time.Second))
+	if err != nil {
+		<-throttler
+		return
+	}
+	defer c.Quit()
+
+	// Try to login
+	err = c.Login(ca.User, ca.Password)
+	if err == nil {
+		output <- fmt.Sprintf("%s:%s", ca.User, ca.Password)
+	}
+
+	<-throttler
+}
+
 // HTTP Basic Auth Bruteforce
 func HTTPBasicAuth(wg *sync.WaitGroup, throttler <-chan int, output chan string, ca Arguments) {
 	defer wg.Done()

diff --git a/internal/util/main.go b/internal/util/main.go
@@ -35,6 +35,7 @@ func DialHost(host string) (err error) {
 }
 
 var supportedProtocols = map[string]int{
+	"ftp":   21,
 	"ssh":   22,
 	"pop3":  110,
 	"imap":  143,

diff --git a/main.go b/main.go
@@ -90,6 +90,8 @@ func main() {
 			wg.Add(1)
 			ca := connect.Arguments{StartTLS: *cli.StartTLS, UseTLS: *cli.UseTLS, Host: *host, User: user, Password: password}
 			switch myURL.Scheme {
+			case "ftp":
+				go connect.FTP(&wg, throttler, outputChannel, ca)
 			case "http", "https":
 				go connect.HTTPBasicAuth(&wg, throttler, outputChannel, ca)
 			case "pop3", "pop3s":