[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1545
  • Last Modified:

Extracting Passwords from WSftp

I use WSftp Pro 2007.

I have over 100 web sites with access through WSftp.

I am turning over some of these sites to other providers. I cannot extract the ftp PASSWORD from WSftp, even though I am the one who entered them in.

How can I get access to the passwords?
0
Richard Korts
Asked:
Richard Korts
  • 4
  • 3
1 Solution
 
rweilCommented:
in the Document and Settings folder under \application Data\ipswitch\ws_ftp\sites there is a main file "ws_ftp.ini" along with other  .ini files for each folder in your Connections.

If you simple copy these .ini files and hand it to the other providers, they will have the same access as you do.

Format is pretty straight forward, each site is delineated by [sitename], you can copy and/or delete sites to get what you want.

Another approach is to use ws_ftp and move the desired items into a separate folder. On the new provider create a same named folder, then replace that .ini file with your .ini file.

hope this helps
0
 
Richard KortsAuthor Commented:
To rweil:

There is no ws_ftp.ini in that folder.

There is a ws_ftp Configuration Settings file that appears to have encrypted passwords; for example,
PWD=V7C11BE0548F9868CD75D821A8F5C2C5AA876AD6A6E7C

Is there a way to "un-encrypt" these?

Thanks
0
 
rweilCommented:
>> There is no ws_ftp.ini in that folder. There is a ws_ftp Configuration Settings.

Ah the joys of different versions. I hate it when a manufacturer makes an change.

Yes that is the file I was thinking about.

No I do not know how to un-encrypt the password string. However a google search on "ws_ftp password encryption" yielded several applications that claim to do the job. None of which I tried.

http://www.securityfocus.com/bid/547/exploit says:
This page contains Javascript that will decrypt an encrypted password taken out of the .ini file. http://www.hispasec.com/wsftp.asp 

http://www.reactive-software.com/ftp-password-recovery.html says:Advanced FTP Password Recovery is a program that will catch, sniff and show your forgotten FTP passwords. This FTP password finder is very easy to use and can recover passwords from all FTP clients including CuteFTP, WS_FTP, FileZilla, SmartFTP, FlashFXP and Bulletproof FTP. We guarantee your FTP password recovery!

http://www.softforall.com/Utilities/SecurityEncryption/WS_FTP_Password_Recoverer09130411.htm says:WS_FTP Password Recoverer will recover all the passwords and host addresses to most versions of WS_FTP.

http://www.froebis.com/english/ws_ftp.shtml says:WS_FTP Password Recoverer will recover all the passwords and host addresses to most versions of WS_FTP.

and there were more.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
Richard KortsAuthor Commented:
To rweil:


This one works. It has a glitch, in that it can't do more than one at a time, even if you refresh the page.

I have to recopy the link below into the browesr address bar every time.

http://www.hispasec.com/wsftp.asp 

But it works.
0
 
Richard KortsAuthor Commented:
To rweil:

I spoke too soon. If the encryption starts and/or ends with an _ (underscore), it doesn't work.

http://www.hispasec.com/wsftp.asp 

0
 
Richard KortsAuthor Commented:
To rweil:

I went to http://www.reactive-software.com/ftp-password-recovery.html. You have to purchase it (about $20) but it seems to work good, I tried one with a _ in the encrypted password, works good.

Thanks.

rkorts

0
 
rweilCommented:

>> http://www.hispasec.com/wsftp.asp works. It has a glitch, in that it can't do more than one at a time, even if you refresh the page. I have to recopy the link below into the browser address bar every time. http://www.hispasec.com/wsftp.asp

Yes but it is JavaScript. So with a few teaks to the code, you should be able to copy/paste the contents of .ini file and have it decrypt them all at once.

>> I spoke too soon. If the encryption starts and/or ends with an _ (underscore), it doesn't work.

Bummer

0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now