---
title: "[bojemoi] feat(borodino): wordlist OS/app defaults en priorité pour le brute-force SSH"
date: 2026-04-26T19:27:06+02:00
draft: false
tags: ["commit", "bojemoi", "main"]
categories: ["Git Activity"]
summary: "Commit 44a5265 par Betty dans bojemoi"
author: "Betty"
---

## Commit `44a5265`

| | |
|---|---|
| **Repository** | bojemoi |
| **Branch** | `main` |
| **Author** | Betty |
| **Hash** | `44a5265e1341c9b6f18b1ae6ee40d89f8d37edd5` |


### Description

Nouveau fichier os-app-defaults.txt (hors git, SecLists gitignoré) :
credentials par défaut OS ISO (Alpine, Metasploitable, Kali, Ubuntu, Debian,
CentOS, Vagrant, Pi, VMware...) + apps (Tomcat, Jenkins, GitLab, Grafana...),
classés blank/trivial → OS → apps.

uzi: _build_combined_userpass() concatène SSH_USERPASS_FILE + SSH_USERPASS_FILE_EXTRA
  sans doublons → os-app-defaults.txt en premier, ssh-betterdefaultpasslist.txt en fallback.
stack: SSH_USERPASS_FILE → os-app-defaults.txt + SSH_USERPASS_FILE_EXTRA → ssh-betterdefaultpasslist.txt

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

### Files Changed

```
M	borodino/thearm_uzi
M	stack/40-service-borodino.yml
```

### Diff Summary

```
 borodino/thearm_uzi           | 30 +++++++++++++++++++++++++++++-
 stack/40-service-borodino.yml |  4 +++-
 2 files changed, 32 insertions(+), 2 deletions(-)
```