What's the most secure FTP client? - GoFuckYourself.com

TripleXPrint · 04-27-2011, 06:01 AM

I recently started using Filezilla and have had a record number of websites hacked. I had to stop saving the login information in the site manager. It sucks because I have so many websites and I switch back and forth a lot. Having to manually enter the ftp credentials suck!

Filezilla is free so the theory holds true that you get what you pay for. What ftp software do you use?

k0nr4d · 04-27-2011, 06:08 AM

Its the protocol that's insecure, not the program. Switch to sftp or ftps.

HomerSimpson · 04-27-2011, 06:16 AM

Total Commander

- versions above 7 have master password that encrypts your FTP passwords

FileZilla protable
- does not have the protection, but since it's not installed at default path most trojans won't be able to locate it and extract passwords

HomerSimpson · 04-27-2011, 06:17 AM

Quote:

Originally Posted by k0nr4d

Its the protocol that's insecure, not the program. Switch to sftp or ftps.

you're right, but lately there were some tojans that was stealing your ftp passwords from config files and registry entries for FileZilla, Total Commander and other ftp clients...

czarina · 04-27-2011, 06:25 AM

I use WSFTP never had a problem with it

Dejan · 04-27-2011, 06:52 AM

You work for CIA bro?
Just setup your IP as only one which can log in to your server via ftp...

u-Bob · 04-27-2011, 06:58 AM

Quote:

Originally Posted by Dejan

You work for CIA bro?
Just setup your IP as only one which can log in to your server via ftp...

or use a knock script if you have dynamic ip.

alias · 04-27-2011, 07:02 AM

WinSCP

http://winscp.net/eng/index.php

Klen · 04-27-2011, 07:47 AM

Quote:

Originally Posted by alias

WinSCP

http://winscp.net/eng/index.php

+1.Using this shit for years and never been hacked.

barcodes · 04-27-2011, 08:00 AM

Is it bad that I use Dreamweavers ftp? I thought I would see some others lol ={. I recently started using coffeecup ftp for binary files as Dreamweaver wont support it. Actually you can change the ftp mappings back and forth, but that seems like a pain.

AdultKing · 04-27-2011, 08:03 AM

Fetch with sftp is good, you need a mac tho

TeenCat · 04-27-2011, 08:07 AM

filezilla is working well for me, never had a problem with hacked sites. if your sites are hacked, you have to check your scripts or ask your hosting

TripleXPrint · 04-27-2011, 08:17 AM

Quote:

Originally Posted by TeenCat

filezilla is working well for me, never had a problem with hacked sites. if your sites are hacked, you have to check your scripts or ask your hosting

I already did that and all conclusions pointed to my FTP client. I ran a split test just for shits and grins and saved one site in my FTP site manager and removed the other. I changed both passwords and waited. The server with the saved login info through Filezilla was hacked within 3 days. The one that I didn't save in the site manager was not hacked. They were both running the exact same software. Same scripts, database, etc. I just mirrored them.

Ultimately it may not be the FTP, but it sure does look as though it is.

adult-help · 04-27-2011, 08:20 AM

you must have pc full of viruses or keyloggers because i cant see how using filezilla alone would guarantee so many hacks..

i stoped using TC after years becasue the way it upload files is travesty- no multi threads..try uploading for example phpmyadmin with TC and filezilla.

Supz · 04-27-2011, 08:43 AM

Quote:

Originally Posted by TripleXPrint

I already did that and all conclusions pointed to my FTP client. I ran a split test just for shits and grins and saved one site in my FTP site manager and removed the other. I changed both passwords and waited. The server with the saved login info through Filezilla was hacked within 3 days. The one that I didn't save in the site manager was not hacked. They were both running the exact same software. Same scripts, database, etc. I just mirrored them.

Ultimately it may not be the FTP, but it sure does look as though it is.

It is also a possibility that it is your PC. not that actual program. You might have some kind of keyboard logger on there or as someone else mentioned, a trojan that reads ftp info. Or someone is sniffing your network, is your wireless router secure? so on so forth. It is not likely the program itself.

CYF · 04-27-2011, 09:34 AM

sftp or scp

seeandsee · 04-27-2011, 09:43 AM

Total Commander is good with master password protection, so they can auto log on your sites, but not 100% protection...

VladS · 04-27-2011, 09:44 AM

I use SmartFTP and it works well. I've had some problems once, but it's nothing to do with the FTP program itself. It all comes to the protocol and the PC setup you have. A good always up to date internet protection program is a must in my opinion, i recommend Kaspersky and NoScript for Firefox.

Socks · 04-27-2011, 09:52 AM

You should really setup an FTP site that requires more than just a password. You can specify ident@ip + password for each account, and also set it to use AUTH TLS for added security.

If you do setup an FTPd, you could also put it in an encrypted hidden container on the server, so even the sys admins (...or anyone, y'know, "seizing" your box) would have no idea it's there, and even if they found it, everything inside it is encrypted.

Also maybe a program like Win Patrol could help to see what programs on your PC are doing and stop certain actions before they're executed.

Another idea might be to install a VMWare instance with Ubuntu or Linux Mint or whatever, then use a Unix FTP program. Nothing on your computer is going to be smart enough to see into your virtual OS and hack your unix!

Maybe try LFTP http://lftp.yar.ru/

hotcontent · 04-27-2011, 10:22 AM

Quote:

Originally Posted by Gsx-R

I use SmartFTP and it works well. I've had some problems once, but it's nothing to do with the FTP program itself. It all comes to the protocol and the PC setup you have. A good always up to date internet protection program is a must in my opinion, i recommend Kaspersky and NoScript for Firefox.

agree, excellent choice, I'm also using

alias · 04-27-2011, 10:25 AM

I think you are trojaned.

04-27-2011, 06:01 AM	#1
TripleXPrint Confirmed User Join Date: Apr 2007 Posts: 983	What's the most secure FTP client? I recently started using Filezilla and have had a record number of websites hacked. I had to stop saving the login information in the site manager. It sucks because I have so many websites and I switch back and forth a lot. Having to manually enter the ftp credentials suck! Filezilla is free so the theory holds true that you get what you pay for. What ftp software do you use? __________________ Skype: Triplexprint

04-27-2011, 06:08 AM	#2
k0nr4d Confirmed User Industry Role: Join Date: Aug 2006 Location: Poland Posts: 9,229	Its the protocol that's insecure, not the program. Switch to sftp or ftps. __________________ Mechanical Bunny Media Mechbunny Tube Script \| Mechbunny Webcam Aggregator Script \| Custom Web Development

04-27-2011, 06:16 AM	#3
HomerSimpson Too lazy to set a custom title Industry Role: Join Date: Sep 2005 Location: Springfield Posts: 13,826	Total Commander - versions above 7 have master password that encrypts your FTP passwords FileZilla protable - does not have the protection, but since it's not installed at default path most trojans won't be able to locate it and extract passwords __________________ Make a bank with Chaturbate - the best selling webcam program Ads that can't be block with AdBlockers !!! /// Best paying popup program (Bitcoin payouts) !!! PHP, MySql, Smarty, CodeIgniter, Laravel, WordPress, NATS... fixing stuff, server migrations & optimizations... My ICQ: 27429884 \| Email:

04-27-2011, 06:52 AM	#6
Dejan Confirmed User Industry Role: Join Date: Apr 2006 Posts: 8,776	You work for CIA bro? Just setup your IP as only one which can log in to your server via ftp... __________________ Convert your East European traffic

04-27-2011, 07:02 AM	#8
alias aliasx Join Date: Apr 2001 Posts: 19,010	WinSCP http://winscp.net/eng/index.php __________________ https://porncorporation.com

04-27-2011, 06:25 AM	#5
czarina Webmaster Extraordinaire Industry Role: Join Date: Jul 2002 Location: A beautiful beach... Posts: 10,748	I use WSFTP never had a problem with it

04-27-2011, 08:00 AM	#10
barcodes Confirmed User Industry Role: Join Date: Mar 2011 Location: Florida Posts: 2,040	Is it bad that I use Dreamweavers ftp? I thought I would see some others lol ={. I recently started using coffeecup ftp for binary files as Dreamweaver wont support it. Actually you can change the ftp mappings back and forth, but that seems like a pain.

04-27-2011, 08:03 AM	#11
AdultKing Raise Your Weapon Industry Role: Join Date: Jun 2003 Location: Outback Australia Posts: 15,601	Fetch with sftp is good, you need a mac tho

04-27-2011, 08:07 AM	#12
TeenCat Too lazy to set a koala Industry Role: Join Date: Jan 2007 Location: CZ/EU forever! Posts: 16,139	filezilla is working well for me, never had a problem with hacked sites. if your sites are hacked, you have to check your scripts or ask your hosting __________________ 6bot / Coming again very soon! Svit Zlin Radio 24/7!

04-27-2011, 08:20 AM	#14
adult-help Confirmed User Industry Role: Join Date: Mar 2008 Posts: 2,450	you must have pc full of viruses or keyloggers because i cant see how using filezilla alone would guarantee so many hacks.. i stoped using TC after years becasue the way it upload files is travesty- no multi threads..try uploading for example phpmyadmin with TC and filezilla. __________________ Adult web templates, Adult WordPress Themes, TGP, MGP.. also Complete Wordpress PaySite Development - Adult WordPress Blog Themes - Free FHG Templates - Free PaySite Script - Adult Tutorials Directory - Adult Domain Marketplace - Adult Jobs

04-27-2011, 09:34 AM	#16
CYF Coupon Guru Industry Role: Join Date: Mar 2009 Location: Minneapolis Posts: 10,973	sftp or scp __________________ Webmaster Coupons Coupons and discounts for hosting, domains, SSL Certs, and more! AmeriNOC Coupons \| Certified Hosting Coupons \| Hosting Coupons \| Domain Name Coupons

04-27-2011, 09:43 AM	#17
seeandsee Check SIG! Industry Role: Join Date: Mar 2006 Location: Europe (Skype: gojkoas) Posts: 50,945	Total Commander is good with master password protection, so they can auto log on your sites, but not 100% protection... __________________ BUY MY SIG - 50$/Year Contact here

04-27-2011, 09:44 AM	#18
VladS Available for Coding Work Industry Role: Join Date: Jun 2008 Posts: 1,435	I use SmartFTP and it works well. I've had some problems once, but it's nothing to do with the FTP program itself. It all comes to the protocol and the PC setup you have. A good always up to date internet protection program is a must in my opinion, i recommend Kaspersky and NoScript for Firefox. __________________ <developer> MechBunny / KVS / PHP / MySQL / HTML5 / CSS3 / jQuery Email: vlad [at] dangerouscoding.com Telegram: @dangerouscoding

04-27-2011, 09:52 AM	#19
Socks Confirmed User Industry Role: Join Date: May 2002 Location: Toronto Posts: 8,475	You should really setup an FTP site that requires more than just a password. You can specify ident@ip + password for each account, and also set it to use AUTH TLS for added security. If you do setup an FTPd, you could also put it in an encrypted hidden container on the server, so even the sys admins (...or anyone, y'know, "seizing" your box) would have no idea it's there, and even if they found it, everything inside it is encrypted. Also maybe a program like Win Patrol could help to see what programs on your PC are doing and stop certain actions before they're executed. Another idea might be to install a VMWare instance with Ubuntu or Linux Mint or whatever, then use a Unix FTP program. Nothing on your computer is going to be smart enough to see into your virtual OS and hack your unix! Maybe try LFTP http://lftp.yar.ru/

04-27-2011, 10:25 AM	#21
alias aliasx Join Date: Apr 2001 Posts: 19,010	I think you are trojaned. __________________ https://porncorporation.com