Commit graph

81 commits

Author SHA1 Message Date
ItsIgnacioPortal
0897546145 feat(wordlist): Added new combo to 'ssh-betterdefaultpasslist.txt'
Implements #1180

Co-authored-by: Paul Werther <pw@evait.de>
2025-03-04 17:09:57 -03:00
Goos
bb5ca8b388
Update ssh-betterdefaultpasslist.txt
added HPE Modular Smart Array (MSA) - Default Username and Passwords
2024-11-21 15:01:38 +01:00
g0tmi1k
4f871eb33a
Merge pull request #1041 from Dec0y-jb/master
Add Pet Libro (PLAF203) default Telnet credentials

Source: https://community.home-assistant.io/t/petlibro-cat-feeder/498637?page=2
2024-11-19 19:23:14 +00:00
g0tmi1k
63e1c38444
Merge pull request #1068 from nu11pointer/patch-1
Add AKCP SP2+SP8 default credentials
2024-08-12 20:33:57 +01:00
Francisco Spínola
ebfb19574c
Add AKCP SP2+SP8 default credentials
sensorProbe2 /
sensorProbe8/
sensorProbe8-X20

default credentials
2024-08-06 14:11:51 +01:00
johnjhacking
26f9c3452e
Update mssql-betterdefaultpasslist.txt
Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-47800
2024-07-15 07:56:22 -06:00
Joe Bartlett
9c6f4406ea
Add Pet Libro (PLAF203) default Telnet credentials 2024-06-19 19:08:49 -04:00
g0tmi1k
e9337bebcf
Merge pull request #999 from ItsIgnacioPortal/RouterCredentials
feat(passwords): Added router default users and passwords

Source: https://portforward.com/

```
import os
from bs4 import BeautifulSoup

invalidValues = ["none", "N/A", "blank", "user created", "password changes when reset", "none; created during initial setup", "PrintedOnRouterLabel", "provided by ISP"]
invalidKeywords = ["none", "leave blank", "n/a", "blank", "found by", "found on", "printed on", "configured during", "create", "last", "located", "on ", "sticker on", "refer to"]

def extract_credentials(file_path):
	with open(file_path, 'r') as file:
		content = file.read()
		soup = BeautifulSoup(content, 'html.parser')
		table = soup.find('table')
		if table:
			model = table.find('th').text.strip().lower().replace('model', '').strip().replace(' ', '-').replace('/', '-')
			usernames = set()
			passwords = set()
			for row in table.find_all('tr')[1:]:
				cols = row.find_all('td')
				username = cols[1].text.strip()
				password = cols[2].text.strip()

				if username not in invalidValues:
					addUsername = True
					tempusername = username.lower()

					for keyword in invalidKeywords:
						if tempusername.startswith(keyword):
							addUsername=False
							break

					if addUsername:
						usernames.add(username)

				if password not in invalidValues:
					addPassword = True
					temppassword = password.lower()
					for keyword in invalidKeywords:
						if temppassword.startswith(keyword):
							addPassword=False
							break

					if addPassword:
						passwords.add(password)

			return model, sorted(usernames), sorted(passwords)
		else:
			return None, None, None

def save_credentials(model, usernames, passwords, output_dir):
	if model and usernames and passwords:
		user_file_path = os.path.join(output_dir, f'{model}_default-users.txt')
		pass_file_path = os.path.join(output_dir, f'{model}_default-passwords.txt')
		with open(user_file_path, 'w') as user_file:
			user_file.write('\n'.join(usernames))
		with open(pass_file_path, 'w') as pass_file:
			pass_file.write('\n'.join(passwords))

def process_files(input_dir, output_dir):
	for file_name in os.listdir(input_dir):
		print(f'Processing file {file_name}')
		file_path = os.path.join(input_dir, file_name)
		model, usernames, passwords = extract_credentials(file_path)
		save_credentials(model, usernames, passwords, output_dir)

# Input directory containing the text files
input_dir = "C:\\Users\\User\\Desktop\\out\\portforward.com"
# Output directory where the output files will be saved
output_dir = "C:\\Users\\User\\Github\\SecLists\\Passwords\\Default-Credentials\\Routers"
process_files(input_dir, output_dir)
```
2024-04-05 15:26:08 +01:00
Ignacio J. Perez Portal
c84fcf055b
chore: Wording 2024-04-05 04:03:05 -03:00
Ignacio J. Perez Portal
9c80d344e1
chore: Fixed typo in router default-passwords README.md 2024-04-05 04:02:43 -03:00
Ignacio J. Perez Portal
fff4d42b5f feat(passwords): Added router default users and passwords
sources:
- https://portforward.com/
2024-04-05 03:40:32 -03:00
barisbogdan
601e25b322
Update default-passwords.txt 2023-11-26 00:38:26 +03:00
vah_13
23e94476a3
update default-passwords.csv
Add SAP passwords for CA Introscope Enterprise Manager
2022-08-22 19:55:03 +04:00
Kevin Hicks
c9486f6a41
add opnsense to default-passwords 2022-06-13 11:37:11 -05:00
zevlag
806526b1dd
Add Baicells default creds from CVE-2022-24693 2022-03-30 10:37:15 -04:00
g0tmi1k
eaf1c8263f
Merge pull request #695 from elitejake/patch-2
Remove duplicated entries
2022-01-31 23:23:47 +00:00
elitejake
d95f0016bb
Remove duplicated entries
Fixes #689
2022-01-29 05:47:02 +00:00
Wernfried
398154efdf
Added default passwords from Huawei 2022-01-21 20:31:21 +01:00
g0tmi1k
55f526662b
Merge pull request #648 from hhc0null/fix_row_column_quantity_to_4
Fix row column quantity to 4
2021-11-24 09:58:16 +00:00
g0tmi1k
9f0e7eb8de
Merge pull request #664 from clem9669/master
Converting default-password.csv to .txt
2021-11-24 09:53:11 +00:00
Siddharth Reddy
c3f29b1567
Update default-passwords.csv 2021-11-20 23:40:12 +05:30
clem9669
f3a6c06404 Converting default-password.csv to .txt 2021-11-04 22:02:46 +01:00
hhc0null
02cdfa5f2d Fix row column quantity to 4 2021-08-31 23:54:51 +09:00
g0t mi1k
545e57b02d dos2unix 2021-08-28 21:29:32 +01:00
g0tmi1k
38ba2a007a
Merge pull request #602 from sAsPeCt488/master
Add Base64 Encoded tomcat-betterdefaultpasslist
2021-08-27 21:16:56 +01:00
cbk914
229fa3f855 Updated Citrix and Avaya default passwords 2021-07-22 00:21:57 +02:00
cbk914
83b091396c Updated cryptominers 2021-07-16 22:01:51 +02:00
cbk914
49c5e8c0c4 Updated cryptominers 2021-07-16 20:49:52 +02:00
cbk914
2a78823f25 Add cryptominers default passwords 2021-07-13 05:13:43 +02:00
cbk914
9a871facf1
Merge branch 'danielmiessler:master' into master 2021-06-26 23:06:55 +02:00
g0tmi1k
9121b47c75
Merge pull request #618 from chacka0101/patch-6
Updates
2021-06-12 19:16:53 +01:00
g0tmi1k
0ff688e83c
Merge pull request #616 from chacka0101/patch-5
Insert F5 Default passwords products
2021-06-12 19:16:38 +01:00
CHackA0101
3be6e4e6e7
Updates
1034 - Hikvision Network Camera,admin,12345,https://www.hikvision.com/UploadFile/image/EN-user%20manual%20of%20%20network%20camera%20v3.0.0.pdf

689 - Dell Switch PowerConnect,admin,admin,https://www.192-168-0-1login.org/router/dell/switch-powerconnect/12568/

1203 - IBM Storwize V7000,superuser,passw0rd,https://www.ibm.com/docs/en/flashsystem-7x00/7.8.1?topic=problem-procedure-resetting-superuser-password

2348 - SolarWinds,admin,<BLANK>,
2021-06-09 20:49:26 -06:00
cbk914
cd20324f79 Merge branch 'danielmiessler:master' into master 2021-06-09 13:09:19 +02:00
CHackA0101
d0fba77aee
Insert F5 Default passwords products
892 - F5 BIG-IP Configuration utility,admin,admin,https://support.f5.com/csp/article/K13148,
893 - F5 BIG-IP command line,root,default,https://support.f5.com/csp/article/K13148,
894 -F5 BIG-IQ Configuration utility,admin,admin,https://support.f5.com/csp/article/K13148,
895 -F5 BIG-IQ command line,root,default,,https://support.f5.com/csp/article/K13148,
896 -F5 FirePass Administrative Console,admin,admin,https://support.f5.com/csp/article/K13148,
897 -F5 FirePass Maintenance Console,maintenance,n/a,https://support.f5.com/csp/article/K13148,
2021-06-07 10:43:20 -06:00
CHackA0101
fc2d2ff14d
Update with Sonatype Nexus Default Passwords:
1568 - Sonatype Nexus Repository Manager,admin,admin123,https://help.sonatype.com/repomanager2/maven-and-other-build-tools/sbt
1569 - Sonatype Nexus Repository Manager,nexus,nexus,
2021-06-02 16:09:40 -06:00
CHackA0101
2b447c7d19
Update default-passwords.csv
2240	SeedDMS		admin		admin		https://www.seeddms.org/index.php?id=2

POC:
https://demo.seeddms.org/out/out.Login.php
User ID: admin
Password: admin
2021-05-17 16:43:21 -06:00
cbk914
cb4febae37 Merge branch 'danielmiessler:master' into master 2021-05-11 16:10:42 +02:00
Thanasis Mitragkas
7eab0af4e4
Add Base64 Encoded tomcat-betterdefaultpasslist 2021-05-01 20:43:44 +03:00
CHackA0101
872ccb43b0
Include line 2020, Raspberrypi password default.
2020: Raspberrypi,pi,raspberry,https://www.raspberrypi.org/documentation/linux/usage/users.md
2021-04-02 12:57:56 -06:00
govolution
e12b9a1499
Update ssh-betterdefaultpasslist.txt
added zyxel hard coded credentials (see https://www.zdnet.com/article/backdoor-account-discovered-in-more-than-100000-zyxel-firewalls-vpn-gateways/)
2021-01-06 17:05:59 +01:00
cbk914
1b38c0429f Add Avaya default hardcoded passwords 2020-11-05 16:37:22 +01:00
cbk914
e06aacd937 Revert "Merge pull request #4 from danielmiessler/master"
This reverts commit c266835781, reversing
changes made to fd4968f43b.
2020-08-11 14:25:56 +02:00
Maximilian Kleinke
e3ae394144 renamed files in Passwords/Default-Credentials for better parsing 2020-07-18 13:59:44 +02:00
govolution
ff84e4dafa
Update telnet-betterdefaultpasslist.txt
source for new passwords: https://www.zdnet.com/article/backdoor-accounts-discovered-in-29-ftth-devices-from-chinese-vendor-c-data/
2020-07-11 17:51:50 +02:00
Karim Kanso
607c3293b4 strip trailing whitespace 2020-05-27 14:26:51 +01:00
Karim Kanso
a3416ba706 standardisze line endings 2020-05-27 14:10:50 +01:00
g0tmi1k
6fae58fa9b
Merge pull request #357 from govolution/patch-3
Update ssh-betterdefaultpasslist.txt

https://github.com/SamuraiWTF/samuraiwtf
http://docs.graylog.org/en/2.4/pages/installation/virtual_machine_appliances.html
https://openvpn.net/vpn-server-resources/deploying-the-access-server-appliance-on-vmware-esxi/
https://www.circl.lu/services/misp-training-materials/
https://documentation.wazuh.com/3.10/installation-guide/virtual-machine.html
https://my.nps.edu/web/c3o/virtual-machine-images
https://virtualboxes.org/images/centos/
2019-10-10 12:13:29 +01:00
g0tmi1k
8e42ce0a0e
Merge pull request #358 from govolution/patch-4
Update windows-betterdefaultpasslist.txt

Source: https://github.com/PowerShellMafia/PowerSploit/blob/master/Privesc/PowerUp.ps1
2019-10-10 12:13:11 +01:00
govolution
993893e0dc
Update mssql-betterdefaultpasslist.txt
Source: https://github.com/fgrehm/vagrant-mssql-express
2019-10-10 12:31:10 +02:00