In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006.
https://packetstormsecurity.com/files/172560/WFTPD-3.25-Credential-Disclosure.html