Option to stop bruteforcing after at least one valid creds pair for each target was found about changeme HOT 3 OPEN

could u please give me dirty and easy solution for this main issue just for now?

from changeme.

Right now there's no configuration option to stop as the scanner was designed to be more of a vulnerability auditor vs a pen testing tool. It would be possible to implement this feature, however it might not behave as expected.

All scanner objects are placed into a queue: https://github.com/ztgrace/changeme/blob/master/changeme/scan_engine.py#L146 and to terminate the scanning, you'd just have to empty out the queue here https://github.com/ztgrace/changeme/blob/master/changeme/scan_engine.py#L121 with something like the code below (I haven't tested). One thing to think about is that this would stop all queued scans for all hosts. If the desired feature is to only stop scans for the host that has valid creds, it will require more code and thought around how to handle it.

while not self.scanners.empty():
  self.scanners.get()

from changeme.

thank u for fast response! i'll try to figure out the best way to implement this feature

from changeme.