diff --git a/.gitignore b/.gitignore
index a91db0d..d985bea 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,6 +3,9 @@ dist/
# generated types
.astro/
+# credentials data, cloned at runtime from the default-creds repo
+.data-repo/
+
# dependencies
node_modules/
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 7e821b3..37e1507 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -1,55 +1,9 @@
-# Contributing to Default Creds
+# Contributing to Default Creds Web
-First off, thank you for considering contributing to **Default Creds**! By organizing credentials by manufacturer, we create a cleaner, more navigable database for security researchers.
+This repository only contains the web frontend (Astro + Svelte). Bug fixes, UI improvements, and feature PRs are welcome here: fork, branch, and open a PR as usual.
-## How to Contribute
-
-1. **Fork** the repository.
-2. Create a **new branch** for your addition (`git checkout -b add-[manufacturer-name]`).
-3. Add or update the YAML file in the `src/data/` directory.
-4. **Validate** your YAML structure (see the schema below).
-5. Commit your changes and **open a Pull Request**.
-
-## YAML Schema Guide
-
-To keep the database consistent, we use a **Manufacturer-First** approach. Each file represents a single brand/manufacturer.
-
-### File Naming
-
-- Use the manufacturer's name in lowercase with hyphens: `cisco.yaml`, `tp-link.yaml`.
-- Extension must be `.yaml`.
-
-### Template
-
-If the manufacturer file doesn't exist, create it in `src/data/`. If it exists, simply add your product to the `entries` list.
-
-```yaml
-name: "Manufacturer Name" # Full name of the brand
-icon: "brand-slug" # Optional: Simple icons (see https://simpleicons.org/)
-tags: # Keywords for search
- - "web"
- - "database"
- - "iot"
-entries:
- - name: "Product Model Name" # Full name of the specific device/service
- version: "all" # Optional: Specific firmware version or "all"
- user: "admin" # Default username
- pass: "admin123" # Default password
- comment: "Initial setup credentials via Web UI"
- - name: "Other Product Model"
- version: "2.0+" # + or - indication if needed
- user: "root"
- pass: "toor"
- comment: "Changed in newer firmware revisions"
-```
-
-## Rules to Follow
-
-1. **Manufacturer Grouping:** Do not create a new file for every device. Check if the manufacturer's file already exists and append your entry there.
-2. **Product Specificity:** Ensure the `name` field inside `entries` clearly identifies the model (e.g., `WRT54G` instead of just `Router`).
-3. **Escape Special Characters:** If a password contains symbols like `#`, `@`, or starts with a dash, wrap it in double quotes: `pass: "@dmin#123"`.
-4. **Icons:** We use [Simple Icons](https://simpleicons.org/). Use the "slug" found in their URL (e.g., `d-link` for D-Link).
+Looking to **add or fix a credential**? That data lives in a separate repo: **[anotherhadi/default-creds](https://github.com/anotherhadi/default-creds)**. See its `CONTRIBUTING.md` for the YAML schema.
## Code of Conduct
-By contributing, you agree to keep this repository a professional and ethical resource. Any malicious, fake, or non-default data will be rejected during the PR review.
+By contributing, you agree to keep this repository a professional and ethical resource.
diff --git a/README.md b/README.md
index a65bef0..701c447 100644
--- a/README.md
+++ b/README.md
@@ -4,76 +4,62 @@
-# Default-Creds
+# Default-Creds Web
-**Default Creds** is a centralized, community-driven repository of factory-set credentials. Designed for pentesters and security researchers, it helps identify weak access points during engagement phases or audit internal infrastructure before they become a security liability.
+This is the web frontend for **[Default Creds](https://github.com/anotherhadi/default-creds)**, a centralized, community-driven database of factory-set credentials.
**Live Instance:** [default-creds.hadi.icu](https://default-creds.hadi.icu?utm_source=github&utm_medium=readme)
**API Documentation:** [default-creds.hadi.icu/api-docs](https://default-creds.hadi.icu/api-docs?utm_source=github&utm_medium=readme)
-## 🎯 The Mission
-
-In the world of cybersecurity, "low-hanging fruit" often comes in the form of unchanged default passwords. Our mission is to provide a fast, reliable, and searchable database of these credentials to help security professionals secure systems before attackers exploit them.
+> Looking to add or fix a credential? That data lives in a separate repo: **[anotherhadi/default-creds](https://github.com/anotherhadi/default-creds)**. This repo is code-only.
## ⚙️ How it Works
-This application is built with **Astro** and **Svelte 5** for maximum performance. It operates as a "Flat-File Database":
+This application is built with **Astro** and **Svelte 5**.
-1. **YAML Powered:** All credentials are stored as structured `.yaml` files in the `src/data/` directory.
-2. **Real-time Search:** The API parses these files on-the-fly (or via build cache) to provide instant results based on service names, versions, or tags.
-3. **Developer Friendly:** A public API is available to integrate these credentials into your own automated scanning tools.
+1. **On boot:** clones the data repo (shallow) into a local, git-ignored directory if it isn't there yet.
+2. **Periodically:** re-fetches and hard-resets to the remote's latest commit (default every 6h), so the site stays current without needing a redeploy whenever the data changes.
+3. **On update:** the in-memory search cache is invalidated so the next request picks up fresh data.
-## 🤝 Community Driven & Contributing
+Configurable via environment variables:
-Security is a collective effort. This project only grows as the community discovers and adds new default configurations.
-
-- **Want to add an app?** Just create a new YAML file in `src/data/`.
-- **Found a mistake?** Submit a Pull Request to update existing entries.
-
-Before contributing, please read our [CONTRIBUTING.md](./CONTRIBUTING.md) for guidelines on how to format your YAML files.
+| Variable | Default | Description |
+| -------------------------- | -------------------------------------------------- | ------------------------------------ |
+| `DATA_REPO_URL` | `https://github.com/anotherhadi/default-creds.git` | Git URL of the data repository |
+| `DATA_REPO_DIR` | `./.data-repo` | Where to clone the data repo locally |
+| `DATA_SYNC_INTERVAL_HOURS` | `6` | How often to re-pull |
## 💻 Local Development
### Prerequisites
- Bun (or nix, just `nix develop`)
+- `git` available on `PATH` (used to clone/pull the data repo)
### Installation
-1. **Clone the repo:**
-
-```bash
-git clone https://github.com/anotherhadi/default-creds.git
-cd default-creds
-
-```
-
-2. **Start the dev server:**
-
```bash
+git clone https://github.com/anotherhadi/default-creds-web.git
+cd default-creds-web
bun dev
```
-3. **Add your data:**
- Drop a `.yaml` file into `src/data/` and it will appear in the search results instantly!
+The data repo is cloned automatically into `.data-repo/` on first run.
### 🛠️ Tech Stack
@@ -88,7 +74,7 @@ Usage of **Default Creds** for attacking targets without prior mutual consent is
---
github |
+ gitlab (mirror) |
+ gitea (mirror)
+
diff --git a/flake.nix b/flake.nix
index 3df6377..47088c8 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,5 +1,5 @@
{
- description = "default-creds – Open-source default credentials database";
+ description = "default-creds-web: Web frontend for the default-creds credentials database";
inputs = {
nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
@@ -20,8 +20,8 @@
bun2nixPkg = bun2nix.packages.${system}.default;
- default-creds = pkgs.stdenv.mkDerivation (finalAttrs: {
- pname = "default-creds";
+ default-creds-web = pkgs.stdenv.mkDerivation (finalAttrs: {
+ pname = "default-creds-web";
version = "1.0.0";
src = ./.;
@@ -44,36 +44,36 @@
installPhase = ''
runHook preInstall
- mkdir -p $out/share/default-creds/src
+ mkdir -p $out/share/default-creds-web
- cp -r dist $out/share/default-creds/dist
- cp -r src/data $out/share/default-creds/src/data
- cp package.json $out/share/default-creds/package.json
- cp -r node_modules $out/share/default-creds/node_modules
+ cp -r dist $out/share/default-creds-web/dist
+ cp package.json $out/share/default-creds-web/package.json
+ cp -r node_modules $out/share/default-creds-web/node_modules
mkdir -p $out/bin
- cat > $out/bin/default-creds << EOF
+ cat > $out/bin/default-creds-web << EOF
#!/bin/sh
export HOST="\''${HOST:-127.0.0.1}"
export PORT="\''${PORT:-4321}"
- exec ${pkgs.nodejs}/bin/node $out/share/default-creds/dist/server/entry.mjs
+ export PATH="${pkgs.git}/bin:\$PATH"
+ exec ${pkgs.nodejs}/bin/node $out/share/default-creds-web/dist/server/entry.mjs
EOF
- chmod +x $out/bin/default-creds
+ chmod +x $out/bin/default-creds-web
runHook postInstall
'';
meta = {
- description = "Open-source database of factory-set credentials";
- homepage = "https://github.com/anotherhadi/default-creds";
+ description = "Web frontend for the default-creds credentials database";
+ homepage = "https://github.com/anotherhadi/default-creds-web";
license = pkgs.lib.licenses.mit;
- mainProgram = "default-creds";
+ mainProgram = "default-creds-web";
};
});
in {
packages.${system} = {
- inherit default-creds;
- default = default-creds;
+ inherit default-creds-web;
+ default = default-creds-web;
};
devShells.${system}.default = pkgs.mkShell {
@@ -88,36 +88,52 @@
lib,
...
}: let
- cfg = config.services.default-creds;
+ cfg = config.services.default-creds-web;
in {
- options.services.default-creds = {
- enable = lib.mkEnableOption "default-creds credential search service";
+ options.services.default-creds-web = {
+ enable = lib.mkEnableOption "default-creds-web credential search service";
port = lib.mkOption {
type = lib.types.port;
default = 4321;
description = "TCP port the service will listen on.";
};
+
+ dataRepoUrl = lib.mkOption {
+ type = lib.types.str;
+ default = "https://github.com/anotherhadi/default-creds.git";
+ description = "Git URL of the default-creds data repository to clone/pull.";
+ };
+
+ dataSyncIntervalHours = lib.mkOption {
+ type = lib.types.int;
+ default = 6;
+ description = "How often (in hours) to re-pull the data repository.";
+ };
};
config = lib.mkIf cfg.enable {
- systemd.services.default-creds = {
- description = "default-creds – default credentials database";
+ systemd.services.default-creds-web = {
+ description = "default-creds-web – default credentials database";
wantedBy = ["multi-user.target"];
after = ["network.target"];
environment = {
HOST = "127.0.0.1";
PORT = toString cfg.port;
+ DATA_REPO_URL = cfg.dataRepoUrl;
+ DATA_SYNC_INTERVAL_HOURS = toString cfg.dataSyncIntervalHours;
+ DATA_REPO_DIR = "/var/lib/default-creds-web/data-repo";
};
serviceConfig = {
- ExecStart = "${self.packages.${system}.default}/bin/default-creds";
- WorkingDirectory = "${self.packages.${system}.default}/share/default-creds";
+ ExecStart = "${self.packages.${system}.default}/bin/default-creds-web";
+ WorkingDirectory = "${self.packages.${system}.default}/share/default-creds-web";
Restart = "on-failure";
RestartSec = "5s";
DynamicUser = true;
+ StateDirectory = "default-creds-web";
NoNewPrivileges = true;
PrivateTmp = true;
@@ -134,6 +150,6 @@
};
};
- nixosModules.default-creds = self.nixosModules.default;
+ nixosModules.default-creds-web = self.nixosModules.default;
};
}
diff --git a/package.json b/package.json
index bdb6b38..b904db4 100644
--- a/package.json
+++ b/package.json
@@ -1,5 +1,5 @@
{
- "name": "default-creds",
+ "name": "default-creds-web",
"type": "module",
"version": "1.0.0",
"scripts": {
diff --git a/src/components/DefaultView.svelte b/src/components/DefaultView.svelte
index 3e0d094..697855f 100644
--- a/src/components/DefaultView.svelte
+++ b/src/components/DefaultView.svelte
@@ -50,7 +50,7 @@
{totalPasswords}
Full list available
here.
+
+ 
-
- 
+
+ 
-
- 
-
-
+
