Commit Graph

279 Commits

Author SHA1 Message Date
Marios K. Pappas b8a5b67a5a Added some commonly used rotated passwords.
This wordlist contains some commonly used passwords that can be found in O365, OWA, and Active Directory environments. They are oriented toward password spraying once the tester gets hold of a list of valid email addresses. The wordlist can be easily modified (e.g testers can change the COMPANY SPORTS_TEAM/HOBBY, LOCATION, and DEPARTMENT values to match their current target).
2023-02-22 19:42:58 +02:00
g0tmi1k 9df8137868 Merge pull request #825 from its0x08/patch-2
Dedupe wordlists
2022-11-22 12:23:09 +00:00
0x08 5a4acd41bd fix: Dedupe wordlist 2022-11-07 13:01:06 +03:00
0x08 2b6d44ccc4 fix: Dedupe wordlist 2022-11-07 12:34:57 +03:00
0x08 256f4f7d35 fix: Dedupe wordlist 2022-11-07 12:32:42 +03:00
0x08 21b131cd57 fix: Dedupe wordlist 2022-11-07 12:23:37 +03:00
0x08 b9a53f09be fix: Dedupe wordlist
- Removed duplicated entries.
2022-11-07 12:18:49 +03:00
vah_13 23e94476a3 update default-passwords.csv
Add SAP passwords for CA Introscope Enterprise Manager
2022-08-22 19:55:03 +04:00
g0t mi1k 324af1d66f Merge into README.md 2022-08-02 07:11:45 +01:00
g0tmi1k f4c697e394 Merge pull request #751 from alins1r/patch-1
Converting 500-worst-passwords.txt.bz2 to .txt
2022-08-02 06:49:59 +01:00
g0tmi1k f804d3649e Merge pull request #763 from khicks/master
Add OPNsense to default-passwords

Source: https://docs.opnsense.org/manual/gui.html
2022-08-02 06:46:37 +01:00
PinkDev1 8b3ccbedaa Fixed #538: Added credits to the relevant README 2022-06-24 00:32:45 -03:00
PinkDev1 74dbbb7f95 Added scraped-JWT-secrets.txt 2022-06-24 00:31:22 -03:00
Kevin Hicks c9486f6a41 add opnsense to default-passwords 2022-06-13 11:37:11 -05:00
alins.ir 9255b8090b Converting 500-worst-passwords.txt.bz2 to .txt 2022-05-05 19:24:56 +04:30
zevlag 806526b1dd Add Baicells default creds from CVE-2022-24693 2022-03-30 10:37:15 -04:00
g0tmi1k 52fbc4a631 Merge pull request #680 from 5tr1x/patch-3
Create months.txt

for i in `cat $1`; do echo ${i}; echo ${i}2019; echo ${i}2020; echo ${i}2021; echo ${i}2022; echo ${i}1; echo ${i}123; done >> n
for i in `cat n`; do echo ${i}; echo ${i}'!'; echo ${i}'@'; echo ${i}'#'; echo ${i}'$'; echo ${i}'%'; echo ${i}'^'; echo ${i}'&'; echo ${i}'*'; echo ${i}'?'; done >> s
hashcat s -r /usr/share/hashcat/rules/leetspeak.rule --stdout > hc
wordlister --input s --perm 1 --min 4 --max 48 --leet &>/dev/null
mv output.txt wl
cat hc wl | sort -u > vvv
wordlister --input vvv --perm 1 --min 4 --max 48 --cap --up &>/dev/null
cat output.txt | sort -u > $2
rm n s hc wl vvv output.txt
2022-02-02 23:36:41 +00:00
g0tmi1k bf2d2a996d Merge pull request #681 from 5tr1x/patch-4
Create days.txt

for i in `cat $1`; do echo ${i}; echo ${i}2019; echo ${i}2020; echo ${i}2021; echo ${i}2022; echo ${i}1; echo ${i}123; done >> n
for i in `cat n`; do echo ${i}; echo ${i}'!'; echo ${i}'@'; echo ${i}'#'; echo ${i}'$'; echo ${i}'%'; echo ${i}'^'; echo ${i}'&'; echo ${i}'*'; echo ${i}'?'; done >> s
hashcat s -r /usr/share/hashcat/rules/leetspeak.rule --stdout > hc
wordlister --input s --perm 1 --min 4 --max 48 --leet &>/dev/null
mv output.txt wl
cat hc wl | sort -u > vvv
wordlister --input vvv --perm 1 --min 4 --max 48 --cap --up &>/dev/null
cat output.txt | sort -u > $2
rm n s hc wl vvv output.txt
2022-02-02 23:36:21 +00:00
g0tmi1k 0d9870d28d Merge pull request #679 from 5tr1x/patch-2
Create seasons.txt



for i in `cat $1`; do echo ${i}; echo ${i}2019; echo ${i}2020; echo ${i}2021; echo ${i}2022; echo ${i}1; echo ${i}123; done >> n
for i in `cat n`; do echo ${i}; echo ${i}'!'; echo ${i}'@'; echo ${i}'#'; echo ${i}'$'; echo ${i}'%'; echo ${i}'^'; echo ${i}'&'; echo ${i}'*'; echo ${i}'?'; done >> s
hashcat s -r /usr/share/hashcat/rules/leetspeak.rule --stdout > hc
wordlister --input s --perm 1 --min 4 --max 48 --leet &>/dev/null
mv output.txt wl
cat hc wl | sort -u > vvv
wordlister --input vvv --perm 1 --min 4 --max 48 --cap --up &>/dev/null
cat output.txt | sort -u > $2
rm n s hc wl vvv output.txt
2022-02-02 23:35:58 +00:00
g0tmi1k eaf1c8263f Merge pull request #695 from elitejake/patch-2
Remove duplicated entries
2022-01-31 23:23:47 +00:00
elitejake d95f0016bb Remove duplicated entries
Fixes #689
2022-01-29 05:47:02 +00:00
Wernfried 398154efdf Added default passwords from Huawei 2022-01-21 20:31:21 +01:00
5tr1x 15a8115ef8 Create days.txt 2021-12-15 15:11:20 -06:00
5tr1x 9b32f5a54d Create months.txt 2021-12-15 15:10:21 -06:00
5tr1x d2043bd9ab Create seasons.txt 2021-12-15 15:04:49 -06:00
g0tmi1k 55f526662b Merge pull request #648 from hhc0null/fix_row_column_quantity_to_4
Fix row column quantity to 4
2021-11-24 09:58:16 +00:00
g0tmi1k 7b9d0b826a Merge pull request #653 from soufianetahiri/master
Fortinet VPN leaked passwords

Source: https://therecord.media/fortinet-warns-customers-after-hackers-leak-passwords-for-87000-vpns/
2021-11-24 09:55:42 +00:00
g0tmi1k 9f0e7eb8de Merge pull request #664 from clem9669/master
Converting default-password.csv to .txt
2021-11-24 09:53:11 +00:00
Siddharth Reddy c3f29b1567 Update default-passwords.csv 2021-11-20 23:40:12 +05:30
clem9669 f3a6c06404 Converting default-password.csv to .txt 2021-11-04 22:02:46 +01:00
Soufiane Tahiri c1dc95bc1e Fortinet VPN leaked passwords
more info at https://therecord.media/fortinet-warns-customers-after-hackers-leak-passwords-for-87000-vpns/
2021-09-10 09:32:35 +02:00
hhc0null 02cdfa5f2d Fix row column quantity to 4 2021-08-31 23:54:51 +09:00
g0t mi1k 545e57b02d dos2unix 2021-08-28 21:29:32 +01:00
g0t mi1k efeb38808c Replace ' ' with ' ' (Empty Characters) 2021-08-28 21:05:13 +01:00
g0tmi1k 38ba2a007a Merge pull request #602 from sAsPeCt488/master
Add Base64 Encoded tomcat-betterdefaultpasslist
2021-08-27 21:16:56 +01:00
cbk914 229fa3f855 Updated Citrix and Avaya default passwords 2021-07-22 00:21:57 +02:00
cbk914 83b091396c Updated cryptominers 2021-07-16 22:01:51 +02:00
cbk914 49c5e8c0c4 Updated cryptominers 2021-07-16 20:49:52 +02:00
cbk914 2a78823f25 Add cryptominers default passwords 2021-07-13 05:13:43 +02:00
cbk914 9a871facf1 Merge branch 'danielmiessler:master' into master 2021-06-26 23:06:55 +02:00
g0tmi1k 9121b47c75 Merge pull request #618 from chacka0101/patch-6
Updates
2021-06-12 19:16:53 +01:00
g0tmi1k 0ff688e83c Merge pull request #616 from chacka0101/patch-5
Insert F5 Default passwords products
2021-06-12 19:16:38 +01:00
CHackA0101 3be6e4e6e7 Updates
1034 - Hikvision Network Camera,admin,12345,https://www.hikvision.com/UploadFile/image/EN-user%20manual%20of%20%20network%20camera%20v3.0.0.pdf

689 - Dell Switch PowerConnect,admin,admin,https://www.192-168-0-1login.org/router/dell/switch-powerconnect/12568/

1203 - IBM Storwize V7000,superuser,passw0rd,https://www.ibm.com/docs/en/flashsystem-7x00/7.8.1?topic=problem-procedure-resetting-superuser-password

2348 - SolarWinds,admin,<BLANK>,
2021-06-09 20:49:26 -06:00
cbk914 cd20324f79 Merge branch 'danielmiessler:master' into master 2021-06-09 13:09:19 +02:00
CHackA0101 d0fba77aee Insert F5 Default passwords products
892 - F5 BIG-IP Configuration utility,admin,admin,https://support.f5.com/csp/article/K13148,
893 - F5 BIG-IP command line,root,default,https://support.f5.com/csp/article/K13148,
894 -F5 BIG-IQ Configuration utility,admin,admin,https://support.f5.com/csp/article/K13148,
895 -F5 BIG-IQ command line,root,default,,https://support.f5.com/csp/article/K13148,
896 -F5 FirePass Administrative Console,admin,admin,https://support.f5.com/csp/article/K13148,
897 -F5 FirePass Maintenance Console,maintenance,n/a,https://support.f5.com/csp/article/K13148,
2021-06-07 10:43:20 -06:00
CHackA0101 fc2d2ff14d Update with Sonatype Nexus Default Passwords:
1568 - Sonatype Nexus Repository Manager,admin,admin123,https://help.sonatype.com/repomanager2/maven-and-other-build-tools/sbt
1569 - Sonatype Nexus Repository Manager,nexus,nexus,
2021-06-02 16:09:40 -06:00
CHackA0101 2b447c7d19 Update default-passwords.csv
2240	SeedDMS		admin		admin		https://www.seeddms.org/index.php?id=2

POC:
https://demo.seeddms.org/out/out.Login.php
User ID: admin
Password: admin
2021-05-17 16:43:21 -06:00
cbk914 cb4febae37 Merge branch 'danielmiessler:master' into master 2021-05-11 16:10:42 +02:00
Thanasis Mitragkas 7eab0af4e4 Add Base64 Encoded tomcat-betterdefaultpasslist 2021-05-01 20:43:44 +03:00
CHackA0101 872ccb43b0 Include line 2020, Raspberrypi password default.
2020: Raspberrypi,pi,raspberry,https://www.raspberrypi.org/documentation/linux/usage/users.md
2021-04-02 12:57:56 -06:00