46 lines
1.2 KiB
Markdown
46 lines
1.2 KiB
Markdown
---
|
|
title: "[bojemoi] fix(uzi): corriger faux positifs http_login et creds non sauvegardés"
|
|
date: 2026-06-21T20:33:59+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit 02d406c par Betty dans bojemoi"
|
|
author: "Betty"
|
|
---
|
|
|
|
## Commit `02d406c`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | Betty |
|
|
| **Hash** | `02d406c9a875ae44bf9de5b58ebaeca8ca68b19c` |
|
|
|
|
|
|
### Description
|
|
|
|
- parse_credentials_from_output: ajouter patterns manquants
|
|
('user' 'pass' avec espace, 'Successful Login: user:pass')
|
|
- run_brute_force_service: sauvegarder les creds quand une session
|
|
s'ouvre mais qu'aucune ligne [+] n'a été détectée (chemins découplés)
|
|
- http/https pre-check: vérifier que AUTH_URI retourne 401/403 sans
|
|
credentials avant de lancer le brute force — évite les faux positifs
|
|
sur serveurs qui retournent 200 sans auth (Bitrix, Hikvision, Apache
|
|
pages statiques)
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M borodino/thearm_uzi
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
borodino/thearm_uzi | 84 +++++++++++++++++++++++++++++++++++++++++++----------
|
|
1 file changed, 69 insertions(+), 15 deletions(-)
|
|
```
|