Remote access
FileZilla Saved Site Credentials
FileZilla saved-site files can contain FTP, FTPS, or SFTP connection details and saved passwords.
Metadata
- id:
remote-access.filezilla-sites - category:
remote-access - sensitivity:
critical - subcategory:
filezilla - artifact types:
credential,configuration - tags:
filezilla,ftp,sftp
Path Matchers
| Path | Kind | Platforms |
|---|---|---|
%APPDATA%\FileZilla\recentservers.xml | file | windows |
%APPDATA%\FileZilla\sitemanager.xml | file | windows |
$HOME/.config/filezilla/recentservers.xml | file | macos |
$HOME/.config/filezilla/sitemanager.xml | file | macos |
Content Indicators
Literal strings:
ServerHostUserPass
Credential Types
password
Impact
credential_accessremote_access