Flag(s) in default_credentials to make possible to determine to which product and for which type of service a specific credential is applicable
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- Python
- Stars
- 257
- Forks
- 72
- Avg merge
- 33m
- Merged PRs (30d)
- 6
Description
Hi @martingalloar and @vah13 I suggest to include other default credentials as well and adding a flag in the file format to note for what protocol/product a credential should be tested. This will require a bit additional logic in the example script for bruteforcing.
Originally posted by @codeHorse87 in https://github.com/OWASP/pysap/issues/41#issuecomment-2517995059
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by inspecting the default_credentials file format and the example bruteforcing script. Trace how credentials are parsed and tested, then verify support for identifying the applicable product, protocol, and service type, along with additional default credentials.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100