knavesec / CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
926 stars 120 forks source link

Move the example config to example.config.json #41

Open TheToddLuci0 opened 1 year ago

TheToddLuci0 commented 1 year ago

Avoid potential issues with people putting their actual secrets into a file tracked by git.

config.json is already in .gitignore, so should be good there.

knavesec commented 1 year ago

Ehh, I think there's always going to be issues with people putting creds in files. Even with a name change, it's still just as easy for users to put their secrets in the example.config.json file and never rename it, which defeats the purpose

knavesec commented 1 year ago

Unless others have strong opinions on this, I plan on just keeping it the way it is. I usually just have a duplicate json file active.config.json or something similar that I use