For Plesk servers (versions prior to 11), FTP usernames and passwords are stored in cleartext within the database. To get a quick overview of all FTP accounts and identify any potentially weak passwords, you can use the following SQL query directly from your command line if you have access:
[root@Plesk /]# mysql -uadmin -p`cat /etc/psa/.psa.shadow` -e "use psa; select sys_users.home, sys_users.login, accounts.password from accounts INNER JOIN sys_users ON accounts.id=sys_users.account_id;"This will give you a nice overview of all usernames, passwords, and the domain name. Here's what it looks like:
+------------------------------------------------------------+
| home | login | password |
+------------------------------------------------------------+
| /var/www/vhosts/domainname1.com | mylogin | mypass123 |
| /var/www/vhosts/mydomain.com | myftp | unsafe567 |
| /var/www/vhosts/anotherdomain.com | ftpuser | secret |
+------------------------------------------------------------+A nice overview with all of your identified domains, usernames, and passwords for FTP. I hope you found this useful!
Rate This Article
Thanks for reading: How to Extract Passwords From a Plesk Server, Sorry, my English is bad:)