Scan Network Services for Weak Credentials

Weak credentials on network services are vendor defaults and easy passwords on SSH, FTP, and databases that an authorized assessment has to catch before an attacker does. This module runs weak credential testing across five protocols, with per-protocol wordlists and a rate-limit that accounts for lockout risk. Account lockout is real, so the rate-limit is there to manage it.

On authorized scope only, you test vendor, default, and weak logins on five protocols: SSH, FTP, MySQL, PostgreSQL, and Microsoft SQL Server. There is no sixth protocol. Account lockout is a real risk; the rate-limit exists because of it. You need network-service-details from fingerprinting. Raw open ports are not enough.