FileZilla

Description

This module iterates through each users %APPDATA% folder on the target host and identifies files associated with FileZilla that often store credentials such as:

• %AppData%\FileZilla\sitemanager.xml

• %AppData%\FileZilla\recentservers.xml

Any discovered credentials will be decoded to the plaintext value if not encrypted by a master password.

For each system output is stored in $pwd\PME\PME\FileZilla\

Supported Methods

• MSSQL

• SMB

• SessionHunter (WMI)

• WMI

• WinRM

Optional Parameters

Parameter	Value	Description
-ShowOutput	N/A	Displays each target output to the console
-SuccessOnly	N/A	Display only successful results

Usage

# Standard execution
PsMapExec -Username [User] -Password [Pass] -targets [All] -Module FileZilla -Method [Method] -ShowOutput