post: commit 44a5265 in bojemoi

content/posts/commits/2026-04-26-commit-44a5265.md

@@ -0,0 +1,47 @@
+---
+title: "[bojemoi] feat(borodino): wordlist OS/app defaults en priorité pour le brute-force SSH"
+date: 2026-04-26T19:27:06+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit 44a5265 par Betty dans bojemoi"
+author: "Betty"
+---
+
+## Commit `44a5265`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | Betty |
+| **Hash** | `44a5265e1341c9b6f18b1ae6ee40d89f8d37edd5` |
+
+
+### Description
+
+Nouveau fichier os-app-defaults.txt (hors git, SecLists gitignoré) :
+credentials par défaut OS ISO (Alpine, Metasploitable, Kali, Ubuntu, Debian,
+CentOS, Vagrant, Pi, VMware...) + apps (Tomcat, Jenkins, GitLab, Grafana...),
+classés blank/trivial → OS → apps.
+
+uzi: _build_combined_userpass() concatène SSH_USERPASS_FILE + SSH_USERPASS_FILE_EXTRA
+  sans doublons → os-app-defaults.txt en premier, ssh-betterdefaultpasslist.txt en fallback.
+stack: SSH_USERPASS_FILE → os-app-defaults.txt + SSH_USERPASS_FILE_EXTRA → ssh-betterdefaultpasslist.txt
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	borodino/thearm_uzi
+M	stack/40-service-borodino.yml
+```
+
+### Diff Summary
+
+```
+ borodino/thearm_uzi           | 30 +++++++++++++++++++++++++++++-
+ stack/40-service-borodino.yml |  4 +++-
+ 2 files changed, 32 insertions(+), 2 deletions(-)
+```