{"id":13539637,"url":"https://github.com/ztgrace/changeme","last_synced_at":"2025-04-02T06:31:15.341Z","repository":{"id":39352125,"uuid":"53683331","full_name":"ztgrace/changeme","owner":"ztgrace","description":"A default credential scanner.","archived":false,"fork":false,"pushed_at":"2021-12-26T10:20:11.000Z","size":383,"stargazers_count":1444,"open_issues_count":17,"forks_count":248,"subscribers_count":63,"default_branch":"master","last_synced_at":"2024-11-03T04:32:40.315Z","etag":null,"topics":["default-creds","infosec","penetration-testing","python","security","security-scanner","security-tools"],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ztgrace.png","metadata":{"files":{"readme":"README.md","changelog":"changeme.1","contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-03-11T17:10:34.000Z","updated_at":"2024-10-27T17:27:40.000Z","dependencies_parsed_at":"2022-07-04T07:18:15.666Z","dependency_job_id":null,"html_url":"https://github.com/ztgrace/changeme","commit_stats":null,"previous_names":[],"tags_count":26,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ztgrace%2Fchangeme","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ztgrace%2Fchangeme/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ztgrace%2Fchangeme/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ztgrace%2Fchangeme/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ztgrace","download_url":"https://codeload.github.com/ztgrace/changeme/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246767847,"owners_count":20830566,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["default-creds","infosec","penetration-testing","python","security","security-scanner","security-tools"],"created_at":"2024-08-01T09:01:29.819Z","updated_at":"2025-04-02T06:31:10.950Z","avatar_url":"https://github.com/ztgrace.png","language":"Python","funding_links":[],"categories":["\u003ca id=\"8f92ead9997a4b68d06a9acf9b01ef63\"\u003e\u003c/a\u003e扫描器\u0026\u0026安全扫描\u0026\u0026App扫描\u0026\u0026漏洞扫描","Python","Miscellaneous","\u003ca id=\"132036452bfacf61471e3ea0b7bf7a55\"\u003e\u003c/a\u003e工具","Misc"],"sub_categories":["\u003ca id=\"de63a029bda6a7e429af272f291bb769\"\u003e\u003c/a\u003e未分类-Scanner","Passwords"],"readme":"# changeme [![Build Status](https://travis-ci.org/ztgrace/changeme.svg?branch=master)](https://travis-ci.org/ztgrace/changeme)\n\nA default credential scanner.\n\n![Basic Scan](https://raw.githubusercontent.com/wiki/ztgrace/changeme/images/basic.gif)\n\n## About\n\nchangeme picks up where commercial scanners leave off. It focuses on detecting default and backdoor credentials and not necessarily common credentials. It's default mode is to scan HTTP default credentials, but has support for other credentials.\n\nchangeme is designed to be simple to add new credentials without having to write any code or modules. changeme keeps credential data separate from code. All credentials are stored in [yaml](http://yaml.org/) files so they can be both easily read by humans and processed by changeme. Credential files can be created by using the `./changeme.py --mkcred` tool and answering a few questions.\n\nchangeme supports the http/https, mssql, mysql, postgres, ssh, ssh w/key, snmp, mongodb and ftp protocols. Use `./changeme.py --dump` to output all of the currently available credentials.\n\nYou can load your targets using a variety of methods, single ip address/host, subnet, list of hosts, nmap xml file and Shodan query. All methods except for Shodan are loaded as a positional argument and the type is inferred.\n\n## Installation\n\nchangeme has only been tested on Linux and has known issues on Windows and OS X/macOS. Use docker to run changeme on the unsupported platforms. It supports either a redis-backed queue (most stable) or an in-memory backed queue.\n\nStable versions of changeme can be found on the [releases](https://github.com/ztgrace/changeme/releases) page.\n\nFor mssql support, `unixodbc-dev` needs to be installed prior to installing the `pyodbc`.\n\nFor postgres support, `libpq-dev` needs to be installed.\n\n[PhantomJS](http://phantomjs.org/) is required in your PATH for HTML report screenshots.\n\nUse `pip` to install the required python modules: `pip install -r requirements.txt`\n\n## Docker\n\nA convenient way of running changeme is to do so inside a Docker container. You can run a pre-built container from Docker Hub, or build your own using the instructions below.\n\n### Run changeme in Docker\n\nDocker runs best in conjunction with Redis as a queue back end. Here's how to get a linked container setup working with Redis.\n\nGet the latest containers: `docker pull redis \u0026\u0026 docker pull ztgrace/changeme`\n\nLaunch redis in the background: `docker run -d --name redis1 redis`\n\nStart changeme linking the redis container by name and mounting a local directory into the container's `/mnt` directory: `docker run -it -v /tmp/results:/mnt --link redis1:redis ztgrace/changeme:latest /bin/sh`\n\nRun changeme with a `--redishost` of `redis` and `--output` file in our mounted volume: `./changeme.py --redishost redis --output /tmp/mnt/results.csv --protocols ssh --threads 20 -d 192.168.1.0/24`\n\n### Build from Dockerfile\n\n1. Build the docker container: `docker build -t changeme .`\n2. Run changeme from inside the container: `docker run -it changeme /bin/bash'\n\n## Usage Examples\n\nBelow are some common usage examples.\n\n* Scan a single host: `./changeme.py 192.168.59.100`\n* Scan a subnet for default creds: `./changeme.py 192.168.59.0/24`\n* Scan using an nmap file `./changeme.py subnet.xml`\n* Scan a subnet for Tomcat default creds and set the timeout to 5 seconds: `./changeme.py -n \"Apache Tomcat\" --timeout 5 192.168.59.0/24`\n* Use [Shodan](https://www.shodan.io/) to populate a targets list and check them for default credentials: `./changeme.py --shodan_query \"Server: SQ-WEBCAM\" --shodan_key keygoeshere -c camera`\n* Scan for SSH and known SSH keys: `./changeme.py --protocols ssh,ssh_key 192.168.59.0/24`\n* Scan a host for SNMP creds using the protocol syntax: `./changeme.py snmp://192.168.1.20`\n\nSee [Wiki Examples](https://github.com/ztgrace/changeme/wiki/Examples) for more detailed examples.\n\n## Known Issues\n\nThe telnet scanner is broken.\n\nAdditionally, anything filed under https://github.com/ztgrace/changeme/issues as a bug.\n\n## Bugs and Enhancements\n\nBugs and enhancements are tracked at [https://github.com/ztgrace/changeme/issues](https://github.com/ztgrace/changeme/issues).\n\n**Request a credential:** Please add an issue to Github and apply the credential label.\n\n**Vote for a credential:** If you would like to help us prioritize which credentials to add, you can add a comment to a credential issue.\n\nPlease see the [wiki](https://github.com/ztgrace/changeme/wiki) for more details.\n\n## Contributors\n\nThanks for code contributions and suggestions.\n\n* @AlessandroZ\n* @m0ther_\n* @GraphX\n* @Equinox21_\n* https://github.com/ztgrace/changeme/graphs/contributors\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fztgrace%2Fchangeme","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fztgrace%2Fchangeme","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fztgrace%2Fchangeme/lists"}