Skip to content

Credentials Validation

simondotsh edited this page Oct 27, 2021 · 1 revision

Why?

While the credentials validation process of the tool takes some time, its purpose is actually to save some. By eliminating targets that cannot be reached or authenticated to, this implies that modules will simply ignore them, avoiding to wait for the timeout in the case where the target does not answer. Multiprocessing has been avoided in this feature, since it attempts to detect a potential account lockout.

How to Optimize?

While scanning a large amount of targets, significant time can be saved by ensuring that these targets are at least reachable on port 445. Therefore, it is highly advised to run a nmap scan on the scope beforehand to then only provide the answering targets to the tool. Keep in mind that a file containing the targets can be given as input.

Clone this wiki locally