[GH-ISSUE #2] 6位纯数字pin码被爆破的可能性太大 #2

Closed
opened 2026-02-26 17:45:31 +03:00 by kerem · 2 comments
Owner

Originally created by @huanchong-99 on GitHub (Feb 1, 2026).
Original GitHub issue: https://github.com/Cucgua/winterm-bridge/issues/2

设置密码的时候没有任何校验,支持字母数字,超过六位数的密码,但是网页端只支持六位纯数字的pin码,在无防护爆破的情况下成功率接近 100%,一旦爆破成功,依靠终端直接接管整个服务器

Originally created by @huanchong-99 on GitHub (Feb 1, 2026). Original GitHub issue: https://github.com/Cucgua/winterm-bridge/issues/2 设置密码的时候没有任何校验,支持字母数字,超过六位数的密码,但是网页端只支持六位纯数字的pin码,在无防护爆破的情况下成功率接近 100%,一旦爆破成功,依靠终端直接接管整个服务器
kerem closed this issue 2026-02-26 17:45:31 +03:00
Author
Owner

@Cucgua commented on GitHub (Feb 1, 2026):

可以的 下个版本改成英文+数字的可能

<!-- gh-comment-id:3830583468 --> @Cucgua commented on GitHub (Feb 1, 2026): 可以的 下个版本改成英文+数字的可能
Author
Owner

@huanchong-99 commented on GitHub (Feb 1, 2026):

期待版本更新,希望支持12位密码,并且允许大小写字母,特殊符号

<!-- gh-comment-id:3830913965 --> @huanchong-99 commented on GitHub (Feb 1, 2026): 期待版本更新,希望支持12位密码,并且允许大小写字母,特殊符号
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/winterm-bridge#2
No description provided.