# NeuroSploit — example credentials file for authenticated testing.
# Pass with:  neurosploit greybox <repo> --url <app> --creds creds.yaml
#        or:  neurosploit run <url> --creds creds.yaml   (after adding --creds support)
#        or in the interactive session:  /creds creds.yaml
#
# Provide ANY of the auth materials below (first match wins), and/or a `login`
# flow the agents will perform with curl before testing.

# --- direct auth material (pick one) ---
jwt: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoiYWRtaW4ifQ.signature
# header: "X-Api-Key: 0123456789abcdef"
# cookie: "session=deadbeef; role=admin"

# --- OR an automated login flow ---
login:
  url: http://localhost:8080/login
  method: POST
  username_field: username
  password_field: password
  username: admin
  password: password
  success: Logout        # text that appears on a successful login

# --- infra/host credentials (used by `neurosploit host <ip> --creds creds.yaml`) ---
ssh:
  host: 10.0.0.5
  port: 22
  user: ubuntu
  password: s3cret        # or:
  key: /home/op/id_ed25519

windows:                  # also used for Active Directory
  host: 10.0.0.10
  domain: CORP
  user: jdoe
  password: Winter2026!   # or pass-the-hash:
  hash: aad3b435b51404eeaad3b435b51404ee:NThashhere