franc-pentest/ldeep

Feature request: password options that aren't 'put it in the command line'

Closed this issue · 1 comments

I'm not especially keen to have my username and password littered in my shell history, if I can avoid it. I would encourage you to consider adding one (or more) of the following:

  • If the -p/--password switch is specified without a value, prompt for the password from the terminal
  • Implement a different switch that does the above
  • Specify a file or an environment variable that, if set, will be read and its contents used as the password

If there's already an option to do this, a pointer would be appreciated (and it might be useful to update the help text if that's the case).

I don't really understand.

$ cat credentials.txt
export PASSWORD="yourpassword"
$ source credentials.txt
$ ldeep -u username -p $PASSWORD

You can already use that tool without your password littered in your shell history.