search

tomatome / grdp

pure golang rdp protocol
GNU General Public License v3.0
195 stars 72 forks source link

Log should never include password #19

Open freimer opened 1 year ago

freimer commented 1 year ago

nla/ntlm.go line 413 (currently) outputs password. This should never happen, regardless of log level. If you must output something, output a hash of the password that can be checked, not the actual password.