Default Credentials

Table of contents

  1. Vulnerability
  2. Prerequisites
  3. Exploit
  4. Recommendations

Vulnerability

Some people think it is a good idea to let default - and publicly documented - credentials on web applications that are provided at installation time. With a quick search, you could find these credentials and gain an initial foothold on the application without too much effort - nor coffee.

Prerequisites

  • Having a network access to the web application.

Exploit

To exploit this vulnerability, simply search for <WEBAPP> default credentials or <WEBAPP> default admin password on your favorite web browser and attempt results on the target. You can also try to use Default Credentials Cheat Sheet which centralize a huge number of default credentials on many technologies.

Recommendations

  • Change default credentials at or after installation.