Questions tagged [default-password]

A default password is a password used on a system when it is delivered or installed, often with the intention that the end user should change it upon first use. Default passwords are common on routers and webcams, among others.

Filter by
Sorted by
Tagged with
0 votes
0 answers

Using Nikto to scan for default credentials on Tomcat

I am practicing initial access & privilege escalation using legacy vulnerabilities, particularly the RCE vulnerability on the Tomcat Manager. I have been trying to use Nikto to first scan the ...
toothlessgibbon's user avatar
1 vote
3 answers

Why does having default router credentials pose a risk? [duplicate]

When I got to I am greeted with my router login page and can go change some settings. Now let's say I still have the factory default login something like "admin", "...
AskedSuperior's user avatar
1 vote
1 answer

Why the need to hardcode passwords? [closed]

Many IOT devices and routers manufacturers hardcode plaintext default passwords in their devices. Why don't they store the hashed password instead? For what functionality do they need the plaintext ...
microwth's user avatar
  • 2,493
0 votes
2 answers

How secure are the default, randomized passwords that ISP routers come with?

Did a little searching an could not find an answer to this. A lot of ISPs these days are providing combination router/modem units, and they come with a pre-configured password that is a random string ...
BarrowWight's user avatar
9 votes
2 answers

How long would it take to brute force an 11 character single-case alphanumeric password?

My previous home wifi router's WPA2 password was permanently fixed to FZ4HBCKHGC8. How long would it take to crack via brute force? Or more pragmatically: How long would it take to exhaust all ...
voices's user avatar
  • 1,739
1 vote
0 answers

Asus tablet/laptop [closed]

I need to crack my Asus. My roommate put a password on it and I can't figure it out. The password hint on the login page says crazed. If anybody knows how to get in this M.F. P.O.S. It would be ...
user167857's user avatar
7 votes
3 answers

How dangerous is an unsecured printer to a network?

I have booted up a brand new printer and me being curious I checked out it's web-interface by typing its IP address in the URL. Poking around, I notice a few things. There is no password set for ...
Inquisitive's user avatar
6 votes
2 answers

IoT devices with public IP?

My understanding of worms like Mirai is the following: Try to telnet/ssh into random IPs using default user/pass credentials from various router/IoT manufacturers If you get in, do Bad Things™. It ...
Elliot Gorokhovsky's user avatar
1 vote
1 answer

What if IoT devices are fabricated with random passwords?

Considering the Dyn DDOS attack which was possible because the IoT devices have poor default passwords, will it be a solution if the company who produces the devices might generate random default ...
Vini7's user avatar
  • 659
55 votes
13 answers

Is it dangerous to use default router admin passwords if only trusted users are allowed on the network?

There are a lot of articles addressing the dangers of default router admin passwords. Certain security applications will also detect default router admin passwords as a vulnerability. However, these ...
Zsw's user avatar
  • 757
-1 votes
2 answers

Calculating permutations of a hexadecimal character set [closed]

How long would it take to run through all permutations/combinations of a ten character set; assuming the character-set is limited to a hexadecimal alphabet? (i.e. 16 characters {0..9}{A..F}; eg. ...
voices's user avatar
  • 1,739
30 votes
6 answers

What is the point of making a complicated PUBLIC password?

I have downloaded a couple of Virtual Machine images from, in order to test different versions of Internet Explorer. When running these images, a complete Windows environment is ...
Vidar S. Ramdal's user avatar
31 votes
3 answers

Danger of default router password

How bad is it to not change the default home router password? Are there any concrete dangers? Are there any attacks directly resulting out of the use of default passwords, not vulnerabilities in the ...
tim's user avatar
  • 29.2k
1 vote
0 answers

Is there a repository of credentials used in training materials/samples and SDKs?

Similar to a default password list for network appliances, it's conceivable that application layer passwords are default from training materials given to a developer. In fact, I have discovered ...
makerofthings7's user avatar
0 votes
0 answers

How do I determine whether a Linux-based router still has the default password? [duplicate]

My goal is to check if the password used by admin is the default password. I work on a Linux-based router. I know the password is stored as a hashed value in /etc/passwd. In generic Linux machines, /...
Christy George's user avatar