Module: Default Credential Scanning

[aconite33]

Add a module that will search for default credentials within an environment. Should operate after TCP ports have been enumerated.

Examples Projects:

• https://github.com/projectdiscovery/nuclei
• https://github.com/lanjelot/patator
• https://github.com/nmap/nmap

[liquidsec]

This is pretty well covered by nuclei's default-login templates. Is there something beyond what nuclei can provide that you had in mind?

[aconite33]

The goal is to replicate what we do with https://github.com/blacklanternsecurity/zmap-asset-inventory in order to achieve similar coverage.

SSH
Telnet
FTP / Anonymous FTP
NFS
iSCSI

All Non HTTP/HTTPS protocols

[amiremami]

I was looking for default credentials scanning on hacktricks, was wondering if this will be added into BBOT in future or it's not in roadmap?