Skip to content

Suggestion: condense "weak password finding" #84

Open
@7MinSec

Description

Hello!

On a recent pentest I did an invoke-sqlaudit with a cred I found on a file share and that server had ~50 accounts on it, 30 of which had default/weak creds. The PowerUpSQL report then has 30 entries talking about the weak login password vulnerability. It would kind of be nice if the vulnerability was listed once and then said something at the end like "Here are a list of the affected credentials:

  • Username: test, password: test
  • Username: dbguy, password: dbguy
  • etc.

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions