Default Credentials
Default credentials are the predefined username and password combinations set by manufacturers for devices, applications, or systems when they are first shipped or installed. These credentials are intended for initial access and configuration by administrators or users. Common examples include combinations like admin/admin, root/root, or admin/password.
Default credentials are widely used in devices such as routers, network switches, IP cameras, and web applications. Many users or organizations fail to change these credentials after setup, leaving systems vulnerable to unauthorized access.
Default Credentials Database
We can find a single resource for all default credentials to assist pentesters during an engagement at:
- https://github.com/ihebski/DefaultCreds-cheat-sheet
- https://www.softwaretestinghelp.com/default-router-username-and-password-list/ (for routers)
Product's Documentation
Note: Default credentials can also be found in the product documentation.