Prevent users from stealing passwords using WireShark and such
I have a Windows Forms application that talks to an FTP server, everything works flawlessly except that a user can use WireShark , an FTP filter, and easily get full access to my FTP server. I really need a way to prevent this, but the only idea I could come up with is to use SFTP or FTPS. The problem is that I am currently using edtFTPnet for free and could not find any free SFTP or FTPS class to implement in my current code.
What would be the best approaches (free or extremely low cost) to solve this problem?
source to share
There are several free SSH libraries: ( SharpSSH , SSH.Net )
The problem is that you are relying on someone without looking at the password. Instead, give your customers your credentials. Whether it is a username and password for each user or issue a certificate to the client.
Also, Daniel's advice sounds; make sure that if they MUST get a password, there won't be any damage that could be done
source to share
I think you are wrong here.
You don't really have control over the client side, so don't try to protect it.
Secure your server instead.
Make sure that the account used by your application has limited rights only on the FTP server. For example, you can deny DIR or restrict it to a specific directory.
source to share