From 591e8a7d605775c9a9cec7ea8c5c082a26f192c9 Mon Sep 17 00:00:00 2001
From: pussycat0x <65701233+pussycat0x@users.noreply.github.com>
Date: Wed, 7 Jul 2021 00:27:34 +0530
Subject: [PATCH] FTP default credentials

---
 network/ftp-default-creds.yaml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 network/ftp-default-creds.yaml

diff --git a/network/ftp-default-creds.yaml b/network/ftp-default-creds.yaml
new file mode 100644
index 0000000000..db6d9789b6
--- /dev/null
+++ b/network/ftp-default-creds.yaml
@@ -0,0 +1,32 @@
+id: ftp-default-credentials
+
+info:
+  name: ftp service default credentials
+  author: pussycat0x
+  severity: critical
+  tags: network,ftp,default_credentials
+network:
+  - payloads:
+      username:
+        - admin
+        - root
+        - anonymous
+      password:
+        - anonymous
+        - password
+        - toor
+        - nas
+        - guest
+        - default
+        - pass1
+        - stingray
+        
+    attack: clusterbomb
+    inputs:
+      - data: "USER {{username}}\r\nPASS {{password}}\r\n"
+    host:
+      - "{{Hostname}}:21"
+    matchers:
+      - type: word
+        words:
+          - "230"
\ No newline at end of file