Commit graph

387 commits

Author SHA1 Message Date
Ignacio J. Perez Portal
f8e9e7d7c9
Merge pull request #1136 from ItsIgnacioPortal/2024-passwords
Add 200 most used passwords of 2024
2024-12-24 03:52:11 -03:00
ItsIgnacioPortal
71cfa58eae fix(wordlist): Renamed '2024-200_most_used_passwords.txt' to '2024-197_most_used_passwords.txt' 2024-12-24 03:47:03 -03:00
ItsIgnacioPortal
da602dea61 fix(wordlist): Removed duplicates from '2024-200_most_used_passwords.txt' wordlist 2024-12-24 03:47:03 -03:00
ItsIgnacioPortal
5297b7a033 feat(wordlist): Added '2024-200_most_used_passwords.txt' wordlist
Co-authored-by: StellarSand <github.serenify@simplelogin.fr>
2024-12-24 03:46:04 -03:00
ItsIgnacioPortal
61e8f2e10a fix(wordlist): Moved *200_most_used_passwords to Common-Credentials directory 2024-12-24 03:38:15 -03:00
武亚茹
b330be206e add Chinese common password 2024-12-14 23:33:48 +08:00
Goos
bb5ca8b388
Update ssh-betterdefaultpasslist.txt
added HPE Modular Smart Array (MSA) - Default Username and Passwords
2024-11-21 15:01:38 +01:00
g0tmi1k
59d8b90609
Merge pull request #1074 from domai-tb/german-wordlist
Add Common German Passwords Wordlist
2024-11-20 10:08:57 +00:00
g0tmi1k
4f871eb33a
Merge pull request #1041 from Dec0y-jb/master
Add Pet Libro (PLAF203) default Telnet credentials

Source: https://community.home-assistant.io/t/petlibro-cat-feeder/498637?page=2
2024-11-19 19:23:14 +00:00
github-actions[bot]
7a118fc417 [Github Action] Automated trickest wordlists update. 2024-11-16 19:03:11 +00:00
github-actions[bot]
3fe5577ac1 [Github Action] Automated trickest wordlists update. 2024-09-11 19:03:26 +00:00
Domai
8570ef441f
feat(docs): Added Documentation for Common German Passwords 2024-08-15 22:40:45 +02:00
Domai
0acd8c7e79
feat(wordlist): Added Common German Passwords 2024-08-15 22:40:34 +02:00
github-actions[bot]
026e65ccc5 [Github Action] Automated trickest wordlists update. 2024-08-15 19:03:20 +00:00
g0tmi1k
63e1c38444
Merge pull request #1068 from nu11pointer/patch-1
Add AKCP SP2+SP8 default credentials
2024-08-12 20:33:57 +01:00
g0tmi1k
abd75d9dc2
Merge pull request #1055 from ItsIgnacioPortal/spanish-wordlists
feat(wordlist): Added spanish wordlists

Source: https://github.com/scipag/password-list/tree/main/countries
2024-08-12 20:30:18 +01:00
Francisco Spínola
ebfb19574c
Add AKCP SP2+SP8 default credentials
sensorProbe2 /
sensorProbe8/
sensorProbe8-X20

default credentials
2024-08-06 14:11:51 +01:00
Ignacio J. Perez Portal
39eca67196 feat(wordlist): Added spanish wordlists 2024-07-16 16:21:04 -03:00
johnjhacking
26f9c3452e
Update mssql-betterdefaultpasslist.txt
Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-47800
2024-07-15 07:56:22 -06:00
github-actions[bot]
a5808e2546 [Github Action] Automated trickest wordlists update. 2024-07-09 13:05:35 +00:00
Joe Bartlett
9c6f4406ea
Add Pet Libro (PLAF203) default Telnet credentials 2024-06-19 19:08:49 -04:00
GitHub Action
56e95b8128 [Github Action] Automated trickest wordlists update. 2024-06-11 16:03:51 +00:00
g0tmi1k
bcc0c2f093
Merge pull request #1005 from molangning/patch-remote-wordlist-updater-rebase
Added a remote wordlist updater (rebase)
2024-06-11 16:40:02 +01:00
g0tmi1k
00a5650cf8
Merge pull request #967 from CodeVIP123/patch-1
A Update milw0rm-dictionary.txt
2024-06-11 16:34:10 +01:00
g0tmi1k
9fd71c4924
Merge pull request #961 from BrandonW6000/patch-1
Update 10-million-password-list-top-100000.txt
2024-06-11 16:33:57 +01:00
Mo Langning
1217405b5b Re added file 2024-04-06 04:16:35 +00:00
Mo Langning
e7ba29df43 Minimum working version 2024-04-06 04:12:58 +00:00
g0tmi1k
834cee13d0
Merge pull request #979 from molangning/patch-pwdb
Imported and cleaned ignis-sec/Pwdb-Public

Source: https://github.com/ignis-sec/Pwdb-Public
2024-04-05 15:32:48 +01:00
g0tmi1k
abae3092df
Merge pull request #995 from molangning/patch-1
Quick typo fix
2024-04-05 15:28:49 +01:00
g0tmi1k
e9337bebcf
Merge pull request #999 from ItsIgnacioPortal/RouterCredentials
feat(passwords): Added router default users and passwords

Source: https://portforward.com/

```
import os
from bs4 import BeautifulSoup

invalidValues = ["none", "N/A", "blank", "user created", "password changes when reset", "none; created during initial setup", "PrintedOnRouterLabel", "provided by ISP"]
invalidKeywords = ["none", "leave blank", "n/a", "blank", "found by", "found on", "printed on", "configured during", "create", "last", "located", "on ", "sticker on", "refer to"]

def extract_credentials(file_path):
	with open(file_path, 'r') as file:
		content = file.read()
		soup = BeautifulSoup(content, 'html.parser')
		table = soup.find('table')
		if table:
			model = table.find('th').text.strip().lower().replace('model', '').strip().replace(' ', '-').replace('/', '-')
			usernames = set()
			passwords = set()
			for row in table.find_all('tr')[1:]:
				cols = row.find_all('td')
				username = cols[1].text.strip()
				password = cols[2].text.strip()

				if username not in invalidValues:
					addUsername = True
					tempusername = username.lower()

					for keyword in invalidKeywords:
						if tempusername.startswith(keyword):
							addUsername=False
							break

					if addUsername:
						usernames.add(username)

				if password not in invalidValues:
					addPassword = True
					temppassword = password.lower()
					for keyword in invalidKeywords:
						if temppassword.startswith(keyword):
							addPassword=False
							break

					if addPassword:
						passwords.add(password)

			return model, sorted(usernames), sorted(passwords)
		else:
			return None, None, None

def save_credentials(model, usernames, passwords, output_dir):
	if model and usernames and passwords:
		user_file_path = os.path.join(output_dir, f'{model}_default-users.txt')
		pass_file_path = os.path.join(output_dir, f'{model}_default-passwords.txt')
		with open(user_file_path, 'w') as user_file:
			user_file.write('\n'.join(usernames))
		with open(pass_file_path, 'w') as pass_file:
			pass_file.write('\n'.join(passwords))

def process_files(input_dir, output_dir):
	for file_name in os.listdir(input_dir):
		print(f'Processing file {file_name}')
		file_path = os.path.join(input_dir, file_name)
		model, usernames, passwords = extract_credentials(file_path)
		save_credentials(model, usernames, passwords, output_dir)

# Input directory containing the text files
input_dir = "C:\\Users\\User\\Desktop\\out\\portforward.com"
# Output directory where the output files will be saved
output_dir = "C:\\Users\\User\\Github\\SecLists\\Passwords\\Default-Credentials\\Routers"
process_files(input_dir, output_dir)
```
2024-04-05 15:26:08 +01:00
g0tmi1k
48aaf83f4a
Merge pull request #1004 from molangning/patch-normalise-folders
Rename folders
2024-04-05 15:20:52 +01:00
Mo Langning
73f78c4133 Rename folders 2024-04-05 10:42:21 +00:00
Ignacio J. Perez Portal
c84fcf055b
chore: Wording 2024-04-05 04:03:05 -03:00
Ignacio J. Perez Portal
9c80d344e1
chore: Fixed typo in router default-passwords README.md 2024-04-05 04:02:43 -03:00
Ignacio J. Perez Portal
fff4d42b5f feat(passwords): Added router default users and passwords
sources:
- https://portforward.com/
2024-04-05 03:40:32 -03:00
Mo Langning
cc0d910d95
Quick typo fix 2024-04-03 11:47:07 +08:00
Jorge Morán
60c34e20a5 Added a JWT key used in CVE-2023-51442 2024-03-25 13:40:09 -05:00
Mo Langning
07dddc805c Imported and cleaned ignis-sec/Pwdb-Public 2024-02-19 07:11:14 +00:00
Michal Špaček
0de04210ab
Update README.md 2024-02-16 14:56:28 +01:00
Mo Langning
b322c01fe0 Moved pbkdf and updated updated readme.md 2024-02-16 06:27:05 +00:00
Mo Langning
a43614bf22 Imported and cleaned php magic hashes 2024-02-16 05:50:44 +00:00
g0tmi1k
928828e17a
Merge pull request #935 from barisbogdan/master
Added Turkish router passwords... again
2024-02-13 15:55:05 +00:00
g0tmi1k
38327109b5
Merge pull request #953 from njmulsqb/patch-1
Update common_corporate_passwords.lst
2024-02-13 13:28:44 +00:00
CodeVIP123
1e88e1f22e
Update milw0rm-dictionary.txt 2024-02-11 10:23:11 +05:30
BrandonW6000
f0ab72480b
Update 10-million-password-list-top-100000.txt 2024-01-07 09:32:33 -06:00
Emmanuel Londono
1682cc6d86 fix(Password/Books): Modify variations to include all_lowercase with underscore and join, and all_uppercase underscore and joined. 2024-01-02 23:58:34 -07:00
Emmanuel Londono
b67b0b20c0 feat(Books): Add greatest books with no leet variations 2024-01-02 19:41:27 -07:00
Emmanuel Londono
94ee6491e3 feat(books): Add greatest books list
-A list of titles world's most acclaimed literary works, scraped from https://www.thegreatestbooks.org/
- Each title should have two leetspeak versions and one version where whitespaces are converted to '_'
2024-01-02 19:06:52 -07:00
Najam Ul Saqib
71d079aff4
Update common_corporate_passwords.lst 2023-12-12 00:31:48 -08:00
StellarSand
56a39ab9a7
added 200 most used passwords of 2023 2023-12-07 15:49:51 +00:00
David McDuffie
77b6dc81ce
Update README.md 2023-12-01 09:56:55 -07:00
David McDuffie
17e88de509
Create README.md 2023-12-01 09:48:07 -07:00
David McDuffie
6aa5af27ac
Add files via upload 2023-11-30 22:37:39 -07:00
David McDuffie
844cb8615c
Rename Passwords/Keyboard-Combinations.txt to Passwords/Keyboard-Walks/Keyboard-Combinations.txt 2023-11-30 22:36:44 -07:00
barisbogdan
601e25b322
Update default-passwords.txt 2023-11-26 00:38:26 +03:00
g0tmi1k
4820f44a3b
Merge pull request #886 from DeveloperOl/master
add localized wikipedia wordlists (Relates to #703)

Source: https://github.com/DeveloperOl/wikipediator_v2
2023-11-23 17:41:11 +00:00
Ignacio J. Perez Portal
51929e9f00 feat(wordlist): Added clean fortinet-2021 username and passwords wordlists 2023-10-10 20:35:58 -03:00
Oliver Boehlk
f317871261 add localized wikipedia wordlists 2023-06-28 12:28:35 +02:00
Marios K. Pappas
b8a5b67a5a
Added some commonly used rotated passwords.
This wordlist contains some commonly used passwords that can be found in O365, OWA, and Active Directory environments. They are oriented toward password spraying once the tester gets hold of a list of valid email addresses. The wordlist can be easily modified (e.g testers can change the COMPANY SPORTS_TEAM/HOBBY, LOCATION, and DEPARTMENT values to match their current target).
2023-02-22 19:42:58 +02:00
g0tmi1k
9df8137868
Merge pull request #825 from its0x08/patch-2
Dedupe wordlists
2022-11-22 12:23:09 +00:00
0x08
5a4acd41bd
fix: Dedupe wordlist 2022-11-07 13:01:06 +03:00
0x08
2b6d44ccc4
fix: Dedupe wordlist 2022-11-07 12:34:57 +03:00
0x08
256f4f7d35
fix: Dedupe wordlist 2022-11-07 12:32:42 +03:00
0x08
21b131cd57
fix: Dedupe wordlist 2022-11-07 12:23:37 +03:00
0x08
b9a53f09be
fix: Dedupe wordlist
- Removed duplicated entries.
2022-11-07 12:18:49 +03:00
vah_13
23e94476a3
update default-passwords.csv
Add SAP passwords for CA Introscope Enterprise Manager
2022-08-22 19:55:03 +04:00
g0t mi1k
324af1d66f Merge into README.md 2022-08-02 07:11:45 +01:00
g0tmi1k
f4c697e394
Merge pull request #751 from alins1r/patch-1
Converting 500-worst-passwords.txt.bz2 to .txt
2022-08-02 06:49:59 +01:00
g0tmi1k
f804d3649e
Merge pull request #763 from khicks/master
Add OPNsense to default-passwords

Source: https://docs.opnsense.org/manual/gui.html
2022-08-02 06:46:37 +01:00
PinkDev1
8b3ccbedaa Fixed #538: Added credits to the relevant README 2022-06-24 00:32:45 -03:00
PinkDev1
74dbbb7f95 Added scraped-JWT-secrets.txt 2022-06-24 00:31:22 -03:00
Kevin Hicks
c9486f6a41
add opnsense to default-passwords 2022-06-13 11:37:11 -05:00
alins.ir
9255b8090b
Converting 500-worst-passwords.txt.bz2 to .txt 2022-05-05 19:24:56 +04:30
zevlag
806526b1dd
Add Baicells default creds from CVE-2022-24693 2022-03-30 10:37:15 -04:00
g0tmi1k
52fbc4a631
Merge pull request #680 from 5tr1x/patch-3
Create months.txt

for i in `cat $1`; do echo ${i}; echo ${i}2019; echo ${i}2020; echo ${i}2021; echo ${i}2022; echo ${i}1; echo ${i}123; done >> n
for i in `cat n`; do echo ${i}; echo ${i}'!'; echo ${i}'@'; echo ${i}'#'; echo ${i}'$'; echo ${i}'%'; echo ${i}'^'; echo ${i}'&'; echo ${i}'*'; echo ${i}'?'; done >> s
hashcat s -r /usr/share/hashcat/rules/leetspeak.rule --stdout > hc
wordlister --input s --perm 1 --min 4 --max 48 --leet &>/dev/null
mv output.txt wl
cat hc wl | sort -u > vvv
wordlister --input vvv --perm 1 --min 4 --max 48 --cap --up &>/dev/null
cat output.txt | sort -u > $2
rm n s hc wl vvv output.txt
2022-02-02 23:36:41 +00:00
g0tmi1k
bf2d2a996d
Merge pull request #681 from 5tr1x/patch-4
Create days.txt

for i in `cat $1`; do echo ${i}; echo ${i}2019; echo ${i}2020; echo ${i}2021; echo ${i}2022; echo ${i}1; echo ${i}123; done >> n
for i in `cat n`; do echo ${i}; echo ${i}'!'; echo ${i}'@'; echo ${i}'#'; echo ${i}'$'; echo ${i}'%'; echo ${i}'^'; echo ${i}'&'; echo ${i}'*'; echo ${i}'?'; done >> s
hashcat s -r /usr/share/hashcat/rules/leetspeak.rule --stdout > hc
wordlister --input s --perm 1 --min 4 --max 48 --leet &>/dev/null
mv output.txt wl
cat hc wl | sort -u > vvv
wordlister --input vvv --perm 1 --min 4 --max 48 --cap --up &>/dev/null
cat output.txt | sort -u > $2
rm n s hc wl vvv output.txt
2022-02-02 23:36:21 +00:00
g0tmi1k
0d9870d28d
Merge pull request #679 from 5tr1x/patch-2
Create seasons.txt



for i in `cat $1`; do echo ${i}; echo ${i}2019; echo ${i}2020; echo ${i}2021; echo ${i}2022; echo ${i}1; echo ${i}123; done >> n
for i in `cat n`; do echo ${i}; echo ${i}'!'; echo ${i}'@'; echo ${i}'#'; echo ${i}'$'; echo ${i}'%'; echo ${i}'^'; echo ${i}'&'; echo ${i}'*'; echo ${i}'?'; done >> s
hashcat s -r /usr/share/hashcat/rules/leetspeak.rule --stdout > hc
wordlister --input s --perm 1 --min 4 --max 48 --leet &>/dev/null
mv output.txt wl
cat hc wl | sort -u > vvv
wordlister --input vvv --perm 1 --min 4 --max 48 --cap --up &>/dev/null
cat output.txt | sort -u > $2
rm n s hc wl vvv output.txt
2022-02-02 23:35:58 +00:00
g0tmi1k
eaf1c8263f
Merge pull request #695 from elitejake/patch-2
Remove duplicated entries
2022-01-31 23:23:47 +00:00
elitejake
d95f0016bb
Remove duplicated entries
Fixes #689
2022-01-29 05:47:02 +00:00
Wernfried
398154efdf
Added default passwords from Huawei 2022-01-21 20:31:21 +01:00
5tr1x
15a8115ef8
Create days.txt 2021-12-15 15:11:20 -06:00
5tr1x
9b32f5a54d
Create months.txt 2021-12-15 15:10:21 -06:00
5tr1x
d2043bd9ab
Create seasons.txt 2021-12-15 15:04:49 -06:00
g0tmi1k
55f526662b
Merge pull request #648 from hhc0null/fix_row_column_quantity_to_4
Fix row column quantity to 4
2021-11-24 09:58:16 +00:00
g0tmi1k
7b9d0b826a
Merge pull request #653 from soufianetahiri/master
Fortinet VPN leaked passwords

Source: https://therecord.media/fortinet-warns-customers-after-hackers-leak-passwords-for-87000-vpns/
2021-11-24 09:55:42 +00:00
g0tmi1k
9f0e7eb8de
Merge pull request #664 from clem9669/master
Converting default-password.csv to .txt
2021-11-24 09:53:11 +00:00
Siddharth Reddy
c3f29b1567
Update default-passwords.csv 2021-11-20 23:40:12 +05:30
clem9669
f3a6c06404 Converting default-password.csv to .txt 2021-11-04 22:02:46 +01:00
Soufiane Tahiri
c1dc95bc1e
Fortinet VPN leaked passwords
more info at https://therecord.media/fortinet-warns-customers-after-hackers-leak-passwords-for-87000-vpns/
2021-09-10 09:32:35 +02:00
hhc0null
02cdfa5f2d Fix row column quantity to 4 2021-08-31 23:54:51 +09:00
g0t mi1k
545e57b02d dos2unix 2021-08-28 21:29:32 +01:00
g0t mi1k
efeb38808c Replace ' ' with ' ' (Empty Characters) 2021-08-28 21:05:13 +01:00
g0tmi1k
38ba2a007a
Merge pull request #602 from sAsPeCt488/master
Add Base64 Encoded tomcat-betterdefaultpasslist
2021-08-27 21:16:56 +01:00
cbk914
229fa3f855 Updated Citrix and Avaya default passwords 2021-07-22 00:21:57 +02:00
cbk914
83b091396c Updated cryptominers 2021-07-16 22:01:51 +02:00
cbk914
49c5e8c0c4 Updated cryptominers 2021-07-16 20:49:52 +02:00
cbk914
2a78823f25 Add cryptominers default passwords 2021-07-13 05:13:43 +02:00
cbk914
9a871facf1
Merge branch 'danielmiessler:master' into master 2021-06-26 23:06:55 +02:00
g0tmi1k
9121b47c75
Merge pull request #618 from chacka0101/patch-6
Updates
2021-06-12 19:16:53 +01:00
g0tmi1k
0ff688e83c
Merge pull request #616 from chacka0101/patch-5
Insert F5 Default passwords products
2021-06-12 19:16:38 +01:00