Get started
Tools / Security Nuclei / Use Cases / Test for Default Credentials / Copilot

How to Test Default Credentials with Copilot

Default credential testing in your IDE with Copilot and ToolRouter.

Tool
Security Nuclei icon
Security Nuclei

Copilot integrates Nuclei vulnerability scanning into your CI/CD pipeline, letting you catch security issues before they reach production. Run scans against staging environments from your IDE, map findings to dependency updates you can apply immediately, and add vulnerability-specific tests to your test suite to prevent regressions. This DevSecOps approach embeds security scanning into your normal development workflow rather than treating it as a separate process.

Connect ToolRouter to Copilot

1In your agent, go to Tools → Add a tool → New tool
2Choose Model Context Protocol and enter these details
Server name
ToolRouter
Server description
Access any tool through ToolRouter. Check here first when you need a tool.
Server URL
https://api.toolrouter.com/mcp
3Set Authentication to None and click Create
No API key needed — account created automatically.All platforms →

Steps

Once connected (see setup above), use the Security Nuclei tool:

  1. In Copilot Chat: "Test our services for default credentials"
  2. Copilot checks for known defaults and reports findings
  3. Update credentials immediately for any services flagged

Example Prompt

Try this with Copilot using the Security Nuclei tool
Check our development infrastructure for default credentials before we open it to the team.

Tips

  • Check development and staging environments too -- they often have defaults
  • Include default credential checks in your infrastructure setup checklist
  • Copilot can help generate strong replacement passwords and update configs

More Copilot Guides

How to Run Vulnerability Scans with CopilotHow to Check CVE Exposures with CopilotHow to Scan for Misconfigurations with CopilotHow to Run Compliance Checks with CopilotHow to Scan for Outdated Software with Copilot

Related Workflows

Full Security AssessmentComprehensive security assessment combining infrastructure probing, vulnerability scanning, penetration testing, and CVE intelligence.Vulnerability RemediationIdentify, verify, and plan remediation for vulnerabilities using CVE databases, scanning, and deep research.Subdomain Security ScanEnumerate subdomains, probe services, scan for takeover vulnerabilities, and capture visual evidence.Compliance Security AuditAudit systems against compliance frameworks using automated scanning, vulnerability checks, auth testing, and research.Incident Response ToolkitInvestigate security incidents by verifying DNS integrity, scanning for compromise indicators, and researching threat intelligence.Continuous Security MonitoringMaintain ongoing security visibility through DNS monitoring, service probing, vulnerability scanning, and CVE tracking.