dracv / betterdefaultpasslist Goto Github PK
View Code? Open in Web Editor NEWThis project forked from govolution/betterdefaultpasslist
This project forked from govolution/betterdefaultpasslist
Note: BetterDefaultPasslist is included in SecLists (https://github.com/danielmiessler/SecLists) and in future I will try to keep them both up-to-date (08.07.2018). What: - list includes default credentials from various manufacturers for their products like NAS, ERP, ICS etc., that are used for standard products like mssql, vnc, oracle and so on - also examples for passwords, in practice those are also being used - the sources are installation guides and other - useful for network bruteforcing - not meant as a complete bruteforcing list, hopefully it is a useful supplement Why: - some manufactures use default credentials for their products - that might be poorly handled by the users - setting networks at risk What to do: - manufacturers: do not use default passwords, instead force users to use strong credentials and document them - users: check if it is possible to change the credentials, otherwise mitigate the risk, for example by network separation or by using proper firewall rules - yes, you can actually use local firewalls too Changelog (small updates not included): - 18.01.2021 added CVE-2017-7722, kudos to mcjon3z (govolution#7) - 06.01.2021 added zyxel hard coded credentials for ssh, added web.txt (default creds for web apps) with same credentials - 11.07.2020 added some backdoor credentials for telnet - 10.10.2019 added default credentials for smb, ssh, mssql - 10.10.2018 added 22 default credentials, ssh, telnet & mysql - 12.07.2018 edoz90 added tomcat.txt - 08.07.2018 added more credentials for ssh.txt and windows.txt - 24.03.2018 added some creds, for VMs that are offered to download (SANS, osboxes.org and more) - 27.09.2017 added about 10 creds - 20.05.2017 added lots of passwords from http://www.petefinnigan.com/default/oracle_default_passwords.htm, msf wordlists and other sources, more than 600 new credentials (most oracle), added db2 and postgres. Thanks to Pete Finnigan for creating the huge oracle default credentials list! - 27.12.2016 addded 3 creds - 08.11.2016 added cirros default credentials - 01.11.2016 added a few credentials for telnet and ftp - 29.10.2016 added sources.txt for the sources (more or less complete) - 28.10.2016 added more credentials the last weeks - 03.10.2016 added some default passwords from mirai bot - 01.10.2016 now 305 default credentials - 25.09.2016 added some credentials - 24.09.2016 added README, 270 credentials
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.