cisagov / cisagov/snafflepy

Prompt for password if the -p flag is not supplied

Open
#36 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
137
Forks
23
PR merge metrics
No merged PRs in 30d

Description

Recently, I ran this tool for the first time without specifying the -p flag. Instead of prompting for a password, the tool attempted a blank password, resulting in a quick account lockout, where I couldn't kill the scan before it was too late. Adding a feature that prompts for a password when not specified with the -p flag would be beneficial to prevent future lockouts. Thank you!

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the command-line handling for the -p flag and the code that initiates the scan. Confirm the behavior when the flag is omitted, then implement an interactive password prompt that avoids attempting a blank password and verify the scan uses the entered value.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
cli, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.