Login Brute Forcing

4MB

Login_Brute_Forcing_Module_Cheat_Sheet.pdf

PDF

Open

Default Passwords

Device/Manufacturer	Default Username	Default Password	Device Type
Linksys Router	admin	admin	Wireless Router
D-Link Router	admin	admin	Wireless Router
Netgear Router	admin	password	Wireless Router
TP-Link Router	admin	admin	Wireless Router
Cisco Router	cisco	cisco	Network Router
Asus Router	admin	admin	Wireless Router
Belkin Router	admin	password	Wireless Router
Zyxel Router	admin	1234	Wireless Router
Samsung SmartCam	admin	4321	IP Camera
Hikvision DVR	admin	12345	Digital Video Recorder (DVR)
Axis IP Camera	root	pass	IP Camera
Ubiquiti UniFi AP	ubnt	ubnt	Wireless Access Point
Canon Printer	admin	admin	Network Printer
Honeywell Thermostat	admin	1234	Smart Thermostat
Panasonic DVR	admin	12345	Digital Video Recorder (DVR)

Alongside default passwords, default usernames are another major security concern. Manufacturers often ship devices with pre-set usernames, such as admin, root, or user. You might have noticed in the table above how many use common usernames. These usernames are widely known and often published in documentation or readily available online. SecLists maintains a list of common usernames at top-usernames-shortlist.txt