CrushFTP Server

Last updated
CrushFTP Server
Developer(s) CrushFTP, LLC
Stable release
10.2.0 [1]   OOjs UI icon edit-ltr-progressive.svg / 5 April 2022
Operating system OS X, Linux, Unix, Windows
Type Secure Web file up/download, FTP server, HTTP server, SFTP Server, WebDAV Server
License Proprietary software
Website www.crushftp.com

CrushFTP is a proprietary multi-protocol, multi-platform file transfer server originally developed in 1999. CrushFTP is shareware with a tiered pricing model. It is targeted at home users on up to enterprise users.

Contents

Features

CrushFTP supports the following protocols: FTP, FTPS, SFTP, HTTP, HTTPS, WebDAV and WebDAV SSL. Additionally, although not a protocol, it has both AJAX/HTML5 and Java applet web interfaces for end users to manage their files from a web browser. CrushFTP uses a GUI for administration, but also installs as a daemon on Mac OS X, Linux, Unix, and as a service in Windows. It supports multihoming, multiple websites with distinct branding, hot configuration changes, Attachment redirection, and GUI-based management of users and groups from a browser. Plugins are included for authentication against SQL databases, LDAP, Active Directory, and other custom methods. All settings are stored in XML files that can be edited directly, or with the web UI. If edited directly, CrushFTP notices the modification timestamp change and load the settings immediately without needing a server restart.

History of CrushFTP

CrushFTP was first published publicly around 1998. [2] Initial versions were FTP only. There were no connection restrictions in version 1.x. CrushFTP 2.x brought about virtual directories in a sense, while CrushFTP 3.x [3] brought about a full virtual file system. It supported the ability to merge and mangle several file systems together regardless if they were from local folders, or another FTP site. It could even act as a proxy for other FTP servers. However the complications from all the potential issues that could go on from this was confusing. CrushFTP 3 introduced tiered pricing models.

CrushFTP 4 focused primarily on a cleaner interface and less confusing virtual file system. While it still seems to have some support for merging FTP sites with a local file system, [4] the support seems limited. Updates in version 4 included a full HTTP server as well as the other supported protocols. Later updates began recognizing connection differences between web browsers and FTP/SFTP clients, counting four web browser connections as only one user against the licensed limit.

[5] CrushFTP 5 continued the evolution of the WebInterface with various iterations. It used a [6] flash interface briefly before replacing it with a HTML/AJAX interface. CrushFTPv5 was the last version to still use a thick client Java Swing UI. [7] Version 6 moved to an all web browser UI.

[8] CrushFTP 6 released in 2012 brought about major changes as the management and monitoring interface became entirely web based. Its interface is based on jQuery and jQuery UI. Multiple administrators can work concurrently, fixing the single admin limitation of prior versions. It had image thumbnail support [9] and file replication and synching.

CrushFTP 7 was released in early 2014. According to the "what's new" page [10] it adds a dashboard for server information, delegated role based administration, graphical job / event designer, MP4 movie streaming support using HTML5, [11] UPnP / PMP port forwarding and automatic external port validation testing, among many other features. Some features are available only to enterprise customers such as user synchronization and DMZ prefs synchronization between internal servers.

CrushFTP 8 was released in late 2016. The "what's new" page lists a new faster HTML5 browser uploading system (4x faster) with resume support, a limited filesystem server mode, and data replication as key new features. There is a revision system on files, a new reports UI, and a stand-alone client UI as part of the release as well. [12]

CrushFTP 9 was released in late 2018. The "what's new" page lists a new CrushBalance load balancer, new Citrix protocol for VFS, uses fewer threads, [Let's Encrypt] plugin support, automated expiration reminder emails for passwords, accounts, and shares. Additionally it lists Proxy Protocol v2 support for AWS load balancers, and an enhanced Job management system. [13]

CrushFTP 10 was released in early 2021. [14]

Features

Plugins

Authentication options

Security

Encryption is supported for files "at rest" using PGP, as well as for passwords using an MD5 or SHA, SHA512, SHA3, MD4 non-reversible hash. SFTP uses SSH for encryption, and FTPS uses SSL/TLS for encryption. [20] SHA-2 hashing algorithms are supported. Hashes can be salted with random salt values.

As August 2021, there has been six published vulnerabilities in CrushFTP. [21]

See also

Related Research Articles

<span class="mw-page-title-main">Konqueror</span> Web browser and file manager

Konqueror is a free and open-source web browser and file manager that provides web access and file-viewer functionality for file systems. It forms a core part of the KDE Software Compilation. Developed by volunteers, Konqueror can run on most Unix-like operating systems. The KDE community licenses and distributes Konqueror under GNU GPL-2.0-or-later.

The Secure Shell Protocol (SSH) is a cryptographic network protocol for operating network services securely over an unsecured network. Its most notable applications are remote login and command-line execution.

Uploading refers to transmitting data from one computer system to another through means of a network. Common methods of uploading include: uploading via web browsers, FTP clients], and terminals (SCP/SFTP). Uploading can be used in the context of clients that send files to a central server. While uploading can also be defined in the context of sending files between distributed clients, such as with a peer-to-peer (P2P) file-sharing protocol like BitTorrent, the term file sharing is more often used in this case. Moving files within a computer system, as opposed to over a network, is called file copying.

The File Transfer Protocol (FTP) is a standard communication protocol used for the transfer of computer files from a server to a client on a computer network. FTP is built on a client–server model architecture using separate control and data connections between the client and the server. FTP users may authenticate themselves with a plain-text sign-in protocol, normally in the form of a username and password, but can connect anonymously if the server is configured to allow it. For secure transmission that protects the username and password, and encrypts the content, FTP is often secured with SSL/TLS (FTPS) or replaced with SSH File Transfer Protocol (SFTP).

In computing, the SSH File Transfer Protocol is a network protocol that provides file access, file transfer, and file management over any reliable data stream. It was designed by the Internet Engineering Task Force (IETF) as an extension of the Secure Shell protocol (SSH) version 2.0 to provide secure file transfer capabilities, and is seen as a replacement of File Transfer Protocol (FTP) due to superior security. The IETF Internet Draft states that, even though this protocol is described in the context of the SSH-2 protocol, it could be used in a number of different applications, such as secure file transfer over Transport Layer Security (TLS) and transfer of management information in VPN applications.

cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various network protocols. The name stands for "Client for URL".

Secure copy protocol (SCP) is a means of securely transferring computer files between a local host and a remote host or between two remote hosts. It is based on the Secure Shell (SSH) protocol. "SCP" commonly refers to both the Secure Copy Protocol and the program itself.

<span class="mw-page-title-main">FileZilla</span> Free software, cross-platform file transfer protocol application

FileZilla is a free and open-source, cross-platform FTP application, consisting of FileZilla Client and FileZilla Server. Clients are available for Windows, Linux, and macOS. Both server and client support FTP and FTPS, while the client can in addition connect to SFTP servers. FileZilla's source code is hosted on SourceForge.

Filesystem in Userspace (FUSE) is a software interface for Unix and Unix-like computer operating systems that lets non-privileged users create their own file systems without editing kernel code. This is achieved by running file system code in user space while the FUSE module provides only a bridge to the actual kernel interfaces.

<span class="mw-page-title-main">WinSCP</span> File transfer software for Windows

WinSCP is a free and open-source file manager, SSH File Transfer Protocol (SFTP), File Transfer Protocol (FTP), WebDAV, Amazon S3, and secure copy protocol (SCP) client for Microsoft Windows.

Oracle XML Publisher (XMLP) is Oracle Corporation's latest reporting technology. It was originally developed to solve the reporting problems faced by Oracle Applications. Osama Elkady from the Applications Technology Group and Tim Dexter from the Financials Group were the main drivers for the product. It was first released with Oracle E-Business Suite 11.5.10 in 2003. Since then it has been integrated into most of Oracle Products including JD Edwards EnterpriseOne application 8.12 and PeopleSoft Enterprise 9, and as a standalone version, XML Publisher Enterprise with no dependency on Oracle Applications. When XML Publisher became part of the Oracle BI Enterprise Edition Suite it was re-branded as Oracle BI Publisher.

EGroupware is free open-source groupware software intended for businesses from small to enterprises. Its primary functions allow users to manage contacts, appointments, projects and to-do lists. The project releases its software under the terms of GNU General Public License (GPL).

Managed file transfer (MFT) is a technology that provides the secure transfer of data in an efficient and reliable manner. MFT software is marketed to companies as a more secure alternative to using insecure protocols like FTP and HTTP to transfer files. By using an MFT solution, companies can avoid custom scripting and meet compliance requirements.

Sysax Multi Server is a Secure FTP Server and a SSH2 Secure Shell Server for the Windows operating system. Web browser-based secure HTTPS file transfers and Telnet access is also supported. The software is certified for Windows Vista, and tested to be compatible with Windows 7/8. The software is also certified for Windows Server 2012 and runs on all 32 and 64 bit editions of Windows including Windows Server 2008. The Personal edition of the software which includes SSH2/SFTP support is free for non-commercial use.

<span class="mw-page-title-main">Cerberus FTP Server</span>

Cerberus FTP Server is a Windows-based FTP server with support for encrypted FTP sessions via FTPS and SFTP as well as web client support via HTTP and HTTPS. The server exposes files using a virtual file system and supports user authentication via built-in users and groups, Active Directory, LDAP and public key authentication. The server is currently developed and supported by Cerberus, LLC.

CompleteFTP is a proprietary FTP and SFTP server for Windows that supports FTP, FTPS, SFTP, SCP, HTTP and HTTPS.

<span class="mw-page-title-main">ProFTPD</span> Open-source FTP server software

ProFTPD is an FTP server. ProFTPD is Free and open-source software, compatible with Unix-like systems and Microsoft Windows . Along with vsftpd and Pure-FTPd, ProFTPD is among the most popular FTP servers in Unix-like environments today. Compared to those, which focus e.g. on simplicity, speed or security, ProFTPD's primary design goal is to be a highly feature rich FTP server, exposing a large amount of configuration options to the user.

multiOTP Authentication system

multiOTP is an open source PHP class, a command line tool, and a web interface that can be used to provide an operating-system-independent, strong authentication system. multiOTP is OATH-certified since version 4.1.0 and is developed under the LGPL license. Starting with version 4.3.2.5, multiOTP open source is also available as a virtual appliance—as a standard OVA file, a customized OVA file with open-vm-tools, and also as a virtual machine downloadable file that can run on Microsoft's Hyper-V, a common native hypervisor in Windows computers.

References

  1. "CrushFTP - Download". Archived from the original on 21 April 2022.
  2. "CrushFTP - Support". www.crushftp.com. Archived from the original on 2021-05-09. Retrieved 2022-04-01.
  3. "Mac Guild Review". Archived from the original on 2015-02-11. Retrieved 2014-12-03.
  4. "Yahoo | Mail, Weather, Search, Politics, News, Finance, Sports & Videos". Archived from the original on 2014-03-02. Retrieved 2014-02-10.
  5. "Getting Started with CrushFTP". 20 July 2010. Archived from the original on 2 January 2015. Retrieved 3 December 2014.
  6. "Crush5wiki: FlashUploads". Archived from the original on 2013-08-22. Retrieved 2014-12-03.
  7. "Crush5wiki: Main". Archived from the original on 2013-08-19. Retrieved 2014-12-03.
  8. "CrushFTP 6 moves to new web-based interface | MacNN". Archived from the original on 2014-02-23. Retrieved 2014-02-10.
  9. "Five cost effective and easy to setup FTP servers for your desktop". 16 November 2012. Archived from the original on 2014-12-23. Retrieved 2014-12-03.
  10. "Crush7wiki: CrushFTP7New". Archived from the original on 2014-02-23. Retrieved 2014-02-10.
  11. "CrushFTP 7 gets visual job scheduling, server dashboard | MacNN". Archived from the original on 2014-02-23. Retrieved 2014-02-11.
  12. "Crush8wiki: CrushFTP8New". Archived from the original on 2020-09-18. Retrieved 2016-10-27.
  13. "Crush9wiki: CrushFTP9New". Archived from the original on 2022-04-01. Retrieved 2018-11-02.
  14. "CrushFTP - Download". Archived from the original on 2021-05-09. Retrieved 2021-08-11.
  15. https://web.archive.org/web/20130914044059/http://crushftp.com/CrushFTP_White_Paper.pdf. Archived from the original (PDF) on 2013-09-14.{{cite web}}: Missing or empty |title= (help)
  16. "Crush8wiki: CrushClient". Archived from the original on 2020-08-10. Retrieved 2017-05-19.
  17. "Crush8wiki: VFS Protocols". Archived from the original on 2020-10-01. Retrieved 2017-05-19.
  18. "CrushFTP 6 Enterprise FTP server review". anewdomain.net. Archived from the original on 2012-09-18.
  19. "Crush8wiki: API". Archived from the original on 2020-09-30. Retrieved 2016-11-04.
  20. "SHA-2 Compatibility | DigiCert.com". www.digicert.com. Archived from the original on 2021-07-25. Retrieved 2022-04-01.
  21. "CVE - Search Results". cve.mitre.org. Archived from the original on 2018-04-28. Retrieved 2018-04-27.