Decrypting FTP Passwords

[rsmithgs]

Hi Guys,

Sorry about this, I'm sure this has been posted before but I cannot find it.

How do I decrypt the FTP passwords stored in the database?

Cheers

Rich

[joximu]

Will be difficult because the password is crypted with random salt:

$cryptpw = crypt($clearpw, generate_rand_salt())

The mailpasswords (and user sql passwords) are crypted in a different way so that ispcp can decrypt and use the cleartext password.

/J

[rsmithgs]

(07-04-2009 08:49 AM)joximu Wrote:  Will be difficult because the password is crypted with random salt:

$cryptpw = crypt($clearpw, generate_rand_salt())

The mailpasswords (and user sql passwords) are crypted in a different way so that ispcp can decrypt and use the cleartext password.

/J

Thanks Joximu, so I assume if I want to recover the passwords I will have to do a brute force attack?

Many Thanks

Richard

---

OK think I have found a way to help me.

I wanted to migrate 2 ISPCP servers into one. One of the servers only has a few FTP accounts on it, I have found I can just copy the data with encrypted password from one database to another which allows login.

[Knut]

You can use dsniff.

Code:

screen dsniff port 21 -w ftplogin.txt

and wait

Knut

[joximu]

also tcpdump will do it... just log to a file with a long sniflen...

/J

[rsmithgs]

Sniffing is another idea but it may be a month or so until everyone has logged in :-)