Ftp Password Wordlist High Quality
Vendors ship devices with hardcoded credentials. This is the highest probability layer.
From breaches like Collection #1, RockYou, etc.—but filter for FTP relevance. Remove obvious web-only passwords (iloveyou, pokemon—unlikely on corp FTP). Keep: ftp password wordlist high quality
Use rockyou.txt but trim it:
# Keep only 6-20 character passwords
awk 'length($0) >= 6 && length($0) <= 20' rockyou.txt > rockyou_ftp_friendly.txt