ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: redact plaintext admin passwords from git audit reports

Browse Source
This commit is contained in:
root
2026-08-14 09:37:01 -04:00
parent 92d8f4eb6b
commit 83c939fc20
2 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/audit/git-audit-2026-08-07.md
+3 -3
View File
@@ -18,9 +18,9 @@ Your Git structure has solid bones but significant hygiene gaps. For a private,
The `scripts` repo (11 commits, 75KB) contains Windows provisioning PowerShell scripts with **plaintext passwords committed to history:**
- `LoveMyBoys73!` -- ippadmin MSP backdoor account
- `Liberty4All!` -- liberty-admin customer admin
- `tire` -- tire power user
- `[REDACTED]` -- ippadmin MSP backdoor account
- `[REDACTED]` -- liberty-admin customer admin
- `[REDACTED]` -- tire power user
These appear in `dell-reimage-kit/` unattend XML and PowerShell. Even if this repo stays private forever, credentials in git history is a ticking time bomb. One accidental `git clone` to the wrong place and those passwords are exposed.