默认密码凭证备忘录工具

在一个地方提供所有默认凭据，以在参与期间协助渗透测试人员，本文档包含从多个来源收集的多个产品默认登录名/密码。

Motivation 赋予动机

• One document for the most known vendors default credentials
  一个文档，用于最知名的供应商默认凭据
• Assist pentesters during a pentest/red teaming engagement
  在渗透测试/红队参与期间协助渗透测试人员
• Helping the Blue teamers to secure the company infrastructure assets by discovering this security flaw in order to mitigate it. See OWASP Guide [WSTG-ATHN-02] - Testing_for_Default_Credentials
  通过发现此安全漏洞来帮助 Blue 团队成员保护公司基础设施资产，以缓解它。参见 OWASP 指南 [WSTG-ATHN-02] - Testing_for_Default_Credentials

Short stats of the dataset
数据集的简短统计信息

Sources 来源

• Changeme 改变
• Routersploit 路由器sploit
• betterdefaultpasslist
• Seclists Seclists （英语）
• ics-default-passwords (thanks to @noraj)
  ics-default-passwords（感谢 @noraj）
• Vendors documentations/blogs
  供应商文档/博客

Installation & Usage 安装与使用

The Default Credentials Cheat Sheet tool is available on pypi
默认凭据备忘单工具可在 pypi 上找到

$ pip3 install defaultcreds-cheat-sheet
$ creds search tomcat

Manual Installation 手动安装

$ git clone https://github.com/ihebski/DefaultCreds-cheat-sheet
$ pip3 install -r requirements.txt
$ cp creds /usr/bin/ && chmod +x /usr/bin/creds
$ creds search tomcat

Creds script Creds 脚本

Usage Guide 使用指南

# Search for product creds
➤ creds search tomcat                                                                                                      
+----------------------------------+------------+------------+
| Product                          |  username  |  password  |
+----------------------------------+------------+------------+
| apache tomcat (web)              |   tomcat   |   tomcat   |
| apache tomcat (web)              |   admin    |   admin    |
...
+----------------------------------+------------+------------+

# Update records
➤ creds update
Check for new updates...

标签：search,凭证,tomcat,默认,备忘录,+----------------------------------+------------+-------	

From： https://www.cnblogs.com/lusuo/p/18085969