Virus na sajtu

[mangia]

Originalno napisao Ivan

@mangia

Upravo sam skinuo FileZilla 3.2.7.1 i koliko vidim jos uvek nema enkripcije.
............

Koristim stariju verziju i po defaultu smjesta sve u XML fajl

C:\Program Files\FileZilla\FileZilla.xml

Evo jedan red iz fajla

<Site Name="test-sajt" Host="test.test.com" Port="21" User="test" Account="" RemoteDir="" LocalDir="" Pass="046044063056" Logontype="1" FWBypass="0" DontSavePass="0" ServerType="0" PasvMode="0" TimeZoneOffset="0" TimeZoneOffsetMinutes="0" Comments="" UTF8="0" DefaultSite="0"/>

Username i password su test a koliko vidim pass je preveden u 046044063056

Ako se ne varam radi se o XOR enkripciji i tako sam nešto i našao na netu.

FileZilla version 2 and FileZilla version 3 use different menthods and formats to store ftp account data. This program can be very useful when you need to migrate your FTP passwords and account data from FileZilla version 2 to version 3 and above.

XOR encryption is used to encode passwords. The same cypher key is always used:
FILEZILLA1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ

The encrypted password is stored in the registry or in the .xml file.
Authors of FileZilla are considering to remove encryption, but for now you have to use decoder to find your FTP account passwords.