Comments on: FTPXerox v1.0 – FTP File Transfer Sniffer

By: Darknet

Darknet — Thu, 11 Jun 2009 09:23:01 +0000

Yes we've covered NetworkMiner before! I think Honeysnap is a good option too, will cover that later.

By: Erik

Erik — Wed, 10 Jun 2009 14:45:27 +0000

I also noticed this question on the pen-test mailing list at securityfocus.

In my opinion the best tool for extracting files sent over FTP from a pcap file is NetworkMiner, it supports both normal (PORT) and passive (PASV) FTP transfers. You can also extract files sent with TFTP, HTTP and SMB with this tool.

But you have to be running Windows to use NetworkMiner, or you could go ahead and install Wine (www.winehq.org)

NetworkMiner is available here:
http://networkminer.sourceforge.net/

I think you

By: David

David — Wed, 10 Jun 2009 09:19:47 +0000

I already know this tool, very effective and do the right job. But thanks for sharing.