ztgrace/changeme

Health v2 · maintenance only

Adoption not part of the score

1516 stars · 252 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

changeme is a Python CLI tool that scans networks for devices and services using default or backdoor credentials. Credential definitions are stored in YAML files, and it supports HTTP/HTTPS, SSH, databases, SNMP, FTP, and other protocols, with targets loadable from IPs, subnets, host lists, nmap XML, or Shodan queries.

Use cases

• scan a subnet for devices with default passwords
• find default credentials on network services before a pentest
• check ssh and database servers for factory-set logins
• audit my network for backdoor credentials
• run a default credential scan from shodan results
• detect default logins on routers and appliances

When to choose

• you need to detect default or backdoor credentials across many protocols
• you want to add new credential checks without writing code, just YAML
• you want to feed targets from nmap XML or Shodan queries

When to avoid

• you need general brute-forcing of common or weak passwords rather than defaults
• you need a supported platform other than Linux without using Docker
• you need a full commercial-grade vulnerability scanner

Facets

cli-tool · maturity active

security penetration-testing vulnerability-scanning security penetration-testing python cli default-credentials credential-scanner network-scanning shodan yaml-credentials command-line linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ztgrace/changeme")