Friday, June 3, 2016

R-COMMAND AND QUBIT AND PE FILES, AND SUBSTRINGS AND DECRYPTION

For loops may be nested, but when and why would we be using this? Suppose we wish to manipulate a bi-dimensional array by setting its elements to specific values; we might do something like this:
# nested for: multiplication table
mymat = matrix(nrow=30, ncol=30) # create a 30 x 30 matrix (of 30 rows and 30 columns)
for(i in 1:dim(mymat)[1]) # for each row
{
for(j in 1:dim(mymat)[2]) # for each column
{
mymat[i,j] = i*j # assign values based on position: product of two indexes
}
}


 https://www.datacamp.com/community/tutorials/tutorial-on-loops-in-r


One of the books I'm currently reading to learn C# asked me to write a method that takes an integer between 1 and 99999 and displays each number in that integer in a sequence, separating each digit by 2 spaces.
For example: the int 87564 would be written to the console as 8 7 5 6 4.
This is simple enough to do using the input as a string, converting it to a char array, or looping over the string with a foreach and printing out a formatted string for each character.
For fun though and mostly to challenge myself, I like to work out the problems as they are intended for someone just learning the concepts for the first time. The chapter was about methods and briefly introduced recursion. It's clearly the author's intent that you solve this using division and modulus operations to pick off each digit and then write them out.
So there really were limited options in terms of solving this with the material you have learned to this point in the book. You could pick off each digit and store it as it's own variable, then later write them out in order since you know the range of integers.
I decided to make the method more useful by really allowing any non-negative integer and my approach involved recursion. I'm not really experienced using recursion so I'd like to get some feedback on my implementation to see what I could have done better.
public class Program
{
    static void Main()
    {
        // Get User Input From Console
        // Validate and parse as int input
        DisplayDigits(input);
    }

    static void DisplayDigits(int value)
    {
        if (value < 10)
        {
            Console.Write("{0}  ", value);
            return;
        }
        DisplayDigits(value / 10);
        Console.Write("{0}  ", value % 10);
    }
 
 http://codereview.stackexchange.com/questions/41174/displaying-each-number-of-an-integer-in-a-sequence
 
 extract PE sections to separate files AND THEIR STRINGS
 
The script attached to this post allows to:
  • extract PE sections to separate files

  • extract strings from all sections providing a context for each string

  • extract strings from all sections providing a context for each string, but in a bit smarter way i.e. excluding strings from sections named .rsrc/.reloc as they often contain a lot of strings that are just random data (e.g. from bitmaps or bytes by chance appearing to look like a ‘meaningful’ sequence of characters)
Notably, the string extraction excludes the appended data – this is a good news if you run the script over e.g. installers.  Installers, as explained in my older post, are very often setup.exe (stub) files with appended data that is compressed/encrypted and doesn’t provide any value to analysts unless decompressed/decrypted.
If the script fails to work, it is most likely a result of a packer/protector that makes some of the PE structures corrupted on purpose (e.g. using values outside reasonable boundaries that are still accepted by the Windows PE loader). The practical value of analysing sections/strings extracted from protected/packed/corrupted files is usually low, so I don’t add any checks in the scripts to detect such cases. Many of these techniques are discussed by Ange and he also offers practical examples – files that he crafted manually to test certain properties of PE files, so if you want to know more about this subject and perhaps improve the script his web site will give you all the info you need.
Btw. if you like python, you can easily toy around with Ero Carrera’s pefile module and re-create the script with the same/better functionality.
You can download PESectionExtractor.pl script here.

 http://www.hexacorn.com/blog/2012/09/02/pesectionextractor-extracting-pe-sections-and-their-strings/
 

Cracking and sniffing GSM with a RTL-SDR

a) Decoding an SMS:
Here are all the available configurations that are supported by airprobe:
     0C : TimeSlot0  "Combined configuration", with SDCCH/4
          (FCCH + SCH + BCCH + CCCH + SDCCH/4)
     0B : TS0  "FCCH + SCH + BCCH + CCCH"
     1S : TS1  SDCCH/8
     2T : TS2  (Full Rate) Traffic
     1TE: TS1  Enhanced Full Rate Traffic
As you can see these are the GSM configurations used in the different frames and you will have to be able to recognize each one to identify if you must use an airprobe configuration or another to decode the data of your call or SMS. If you look at the traffic in Wireshark but it doesn’t seem to be right (for example you made a call or sent a text message while capturing but the Ciphering Mode Command is missing) it is pretty sure that you are using the wrong configuration (0B instead of 0C or vise versa). It is important to try both and figure out which one is correct for the cell you are observing.
I will assume you sent a text message to yourself while capturing data.
So now you can see all the messages of the beacon channel, but what are you looking for in the Wireshark log? It is quite simple: first a “Paging Request” for the TMSI of the target phone, then a “Ciphering Mode Command”. These are the messages which indicate that a transaction actually happened.
Now to continue with the flow it is best to try to decode the same cfile but now giving the key too to go.sh:
./go.sh capture.cfile 64 0C KEY
I will explain how to get the Kc key with my method in a later thread.
What are we looking for now? Well, it depends on the network: either there is an “Immediate Assignment” telling the phone to move to different timeslot (so they are not using the busy beacon channel to do their business) or you will actually be able to see the text message.
If instead of the SMS you find an “Immediate Assignment” message you need to open it and see which timeslot the phone is being commanded to and then you need to decode that timeslot using go.sh. So, for example if it says that the phone needs to go to Timeslot 2 then your command would be:
./go.sh capture.cfile 64 2S KEY
Notice that I did not only change the Timeslot number from 0 to 2, but also the configuration from C to S, because the target phone is now on a Standalone Dedicated Control Channel (SDCCH), not on the beacon channel so we need to decode it differently.
Also worth noting that SMS messages are almost always sent on the Control Channel not on the Traffic Channel.
Here is a flowchart of the whole process to make it easier to understand (naturally since we can only see the downlink this shows only what happens on the downlink):
gsm_sms_flowchart
b) Decoding a Voice call:
Now that we were able to decode an SMS let’s get to something a little bit harder: decoding a voice call!
Well the first step is the same as it was when we decoded a text message: we look at the beacon channel, Timeslot 0:
./go.sh capture.cfile 64 0C
What do we expect to see? Nothing besides the “Cipher Mode Command” because we didn’t provide the key, so let’s do that:
./go.sh capture.cfile 64 0C KEY
All right, what should we see now? Logically there needs to be an “Immediate Assignment” command, because the phone NEEDS to change at least once to a different timeslot to receive voice data (to a Traffic Channel, Timeslot 1-7).  What we saw when decoding the SMS is correct here too: depending on the network configuration we can see some messages about the call setup (if it is an incoming call we can even see the caller ID – the phone number calling our target) then an “Immediate Assignment” (configuration ‘C’ – combined) or we can only see an “Immediate Assignment” directing the phone to a Control Channel (just like it happened when receiving an SMS, configuration ‘B’).
Of course if you follow the phone to the Control Channel you will see the call setup messages (in case of an incoming call) then another “Immediate Assignment” command, this time directing the phone to a Traffic Channel.
Here is again a flow chart showing the process:
gsm_call_flowchart
Now there is only one question left: how do we decode the traffic channel to actually get the voice data? Again, it is something that depends on the network: if the network uses simply Full Rate Speech then you can do the same what has been written in Srlabs’s tutorial:
./go.sh capture.cfile 64 1T KEY
What does this command do? It decodes Timeslot 1 as a Traffic Channel. We know what timeslot to decode from the “Immediate Assignment” command message, T means Full Rate Speech. The command results in a file called “speech.au.gsm, which needs to be converted to .au file using ‘toast’:
toast -d speech.au.gsm
The toast tool is a software to convert files and I will explain the setup process of this software on another thread. The resulting .au file could be played back using any player, e.g. cvlc (Command Line VLC):
cvlc speech.au
So you must download and install VLC player too.
If you can not hear anything but beeps and other weird noises then there is a pretty good chance that the cell is using Enhanced Full Rate Speech instead of simple Full Rate Speech.
To decode the channel as an Enhanced Full Rate Speech Traffic Channel:
./go.sh capture.cfile 64 1TE KEY
This results in a file called “speech.amr which could be played back without any more modifications using for example Commandline VLC:
cvlc speech.amr
All the threads related to this topic will be classified under the category of GSM software setup!!! You can read them on the first page!!!

 https://ferrancasanovas.wordpress.com/cracking-and-sniffing-gsm-with-rtl-sdr-concept/

Giant List of DEFAULT PASSWORDS For Everything From 3Com to Cisco to Xerox

Do you need the default username or password for a router, firewall, switch… Below is a list of default passwords I found and cleaned up.  If you know of any other default passwords, please add a comment containing that information at the end of this post. 

http://www.urtech.ca/2011/12/default-passwords/

Vendor Model Version Access Type Username Password Rights Comments
2Wire WiFi routers n/a HTTP none Wireless Admin Almost all 2wire routers
3COM CoreBuilder 7000/6000/3500/2500 Telnet debug synnet    
3COM CoreBuilder 7000/6000/3500/2500 Telnet tech tech    
3COM HiPerARC v4.1.x Telnet adm (none)    
3COM LANplex 2500 Telnet debug synnet    
3COM LANplex 2500 Telnet tech tech    
3COM LinkSwitch 2000/2700 Telnet tech tech    
3COM NetBuilder   SNMP   ILMI snmp-read  
3COM Netbuilder   Multi admin (none) Admin  
3COM Office Connect ISDN Routers 5×0 Telnet n/a PASSWORD Admin  
3COM SuperStack II Switch 2200 Telnet debug synnet    
3COM SuperStack II Switch 2700 Telnet tech tech    
3COM OfficeConnect 812 ADSL   Multi adminttd adminttd Admin  
3COM Wireless AP ANY Multi admin comcomcom Admin Works on all 3com wireless
APs
3COM CellPlex 7000 Telnet tech tech User  
3COM cellplex 7000 Telnet admin admin Admin  
3COM cellplex 7000   operator (none) Admin  
3COM HiPerARC v4.1.x Telnet adm (none) Admin  
3COM 3Com SuperStack 3     security security Admin  
3COM superstack II 1100/3300   3comcso RIP000 initialize resets all pws to defaults
3COM LANplex 2500 Telnet tech (none) Admin  
3COM CellPlex   HTTP admin synnet Admin  
3COM NetBuilder     (none) admin User SNMP_READ
3COM SuperStack II Switch 2700 Telnet tech tech Admin  
3COM CellPlex 7000 Telnet root (none) Admin  
3COM HiPerACT v4.1.x Telnet admin (none) Admin  
3COM CellPlex 7000 Telnet tech (none) Admin  
3COM CellPlex 7000 Telnet admin admin Admin  
3com CellPlex 7000 Telnet tech tech Admin  
3com super   Telnet admin (none) Admin  
3com cellplex 7000 Multi admin admin Admin RS-232/telnet
3COM SuperStack 3 4XXX Multi admin (none) Admin  
3COM SuperStack 3 4XXX Multi monitor monitor User  
3COM SuperStack 3 4400-49XX Multi manager manager User can access/  
3com CellPlex 7000 Telnet root (none) Admin  
3com Netbuilder   Multi admin (none) Admin  
3com cellplex 7000 Telnet operator (none) Admin  
3com OfficeConnect 812 ADSL 01.50-01 Multi admin (none) Admin  
3com cellplex   Multi admin admin Admin  
3com HiPerACT v4.1.x Telnet admin (none) Admin  
3com 3c16405   Multi n/a (none) Admin  
3com 3c16405   Console Administrator (none) Admin  
3com Switch 3300XM Multi admin admin Admin  
3com SS III Switch 4xxx (4900 – sure) Telnet recovery recovery resets_all_to_default u need to power offunit.
tbl_
3com OfficeConnect Wireless 11g   HTTP (none) admin Admin  
3COM Netbuilder   HTTP Root (none) Admin http://10.1.0.1
3COM 3C16405   Multi admin (none) Admin  
3COM 3C16450   Multi admin (none) Admin telnet or serial
3COM 3C16406   Multi admin (none) Admin telnet or serial
3COM OfficeConnect 812 ADSL 01.50-01 Multi admin (none) Admin  
3COM cellplex   Multi n/a (none) Admin  
3COM cellplex   Multi admin admin Admin  
3COM HiPerACT v4.1.x Telnet admin (none) Admin  
3COM 3c16405   Console Administrator (none) Admin  
3COM CellPlex 7000 Telnet tech (none) Admin  
3COM Switch 3300XM Multi admin admin Admin  
3COM SS III Switch 4xxx (4900 – sure) Telnet recovery recovery resets_all_to_default u need to power off unit.
tbl_
3COM OfficeConnect Wireless   HTTP (none) admin Admin  
3COM 11g Cable/DSL Gateway            
3COM 3CRADSL72 1.2 Multi (none) 1234admin Admin snmp open by default with
3COM             public / private community
3COM CB9000 / 4007 3 Console Type User: FORCE (none) Admin This will recover a lost
password
3COM             and reset the switch
configto
3COM             Factory Default
3COM officeconnect   Multi n/a (none) Admin  
3COM Internet Firewall 3C16770 HTTP admin password Admin  
3COM superstack II Netbuilder 11.1 Multi n/a (none) Admin  
3COM Office Connect ISDN Routers 5×0 Telnet? n/a PASSWORD Admin  
3com 812   HTTP Administrator admin Admin  
3COM CoreBuilder 7000/6000/3500/2500 Telnet n/a admin Admin  
3COM CoreBuilder 7000/6000/3500/2500 Telnet n/a (none) Admin  
3com officeconnect   Multi admin (none) Admin  
3com office connect 11g Multi admin (none) User  
3COM OfficeConnect ADSL 3CRWDR100-72 HTTP (none) admin Admin http://192.168.1.1
3Com Shark Fin Comcast-supplied HTTP User Password Diagnostics page 192.160.100.1
3com LANplex 2500 Telnet n/a admin Admin  
3Com 3CRWDR100A-72 2.06 (Sep 21 2005 14:24:48) HTTP admin 1234admin Admin Provided by Ya.com provider
in
3COM OfficeConnect 812 ADSL   Multi Administrator admin Admin terra
3com corebuilder 7000/600/3500/2500   defug synnet    
3M VOL-0215 etc.   SNMP volition volition Admin for Volition fibre switches
3ware 3DM   HTTP Administrator 3ware Admin  
5200-Serie              
Accelerated DSL CPE and DSLAM   Telnet sysadm anicust    
ACCTON Wirelessrouter T-online HTTP none 0 Admin YEAHH
accton
t-online
accton   Multi (none) 0 Admin  
accton
t-online
accton   Multi (none) 0 Admin  
Aceex Modem ADSL Router   HTTP admin (none) Admin  
Aceex Modem ADSL Router   HTTP admin (none) Admin  
Actiontec Wireless Broadband Router   Multi admin password Admin Verizon Fios Setup
ADC
Kentrox
Pacesetter Router   Telnet n/a secret    
Addon GWAR3000/ARM8100   HTTP admin admin Admin http://www.addon-tech.com
ADIC Scalar 100/1000   HTTP admin secure Admin  
ADIC Scalar i2000   Multi admin password Admin  
adtran MX2800   Telnet n/a adtran Admin hit enter a few times
adtran Smart 16/16e   Telnet n/a (none) Admin hit enter a few times
adtran Atlas 800/800Plus/810Plus/   Telnet n/a Password Admin crtl-L
adtran Smart 16/16e   Telnet n/a PASSWORD Admin hit enter a few times
adtran NxIQ   Telnet n/a adtran Admin hit enter a few times
adtran TSU IQ/DSU IQ   Telnet n/a (none) Admin hit enter a few times
adtran Express 5110/5200/5210   Telnet n/a adtran Admin hit enter a few times
adtran Agent Card   Telnet n/a ADTRAN Admin ctrl-PTT
adtran TSU Router Module/   Telnet n/a (none) Admin hit enter a few times
adtran T3SU 300   Telnet n/a adtran Admin Hit enter a few times
Advantek
Networks
Wireless LAN 802.11 g/b   Multi admin (none) Admin http://www.advanteknetworks.com/
Aethra Starbridge EU   HTTP admin password Admin  
AG              
AG              
AirTies
RT-210
AirTies RT-210 AirTies RT-210 Telnet admin admin Admin AirTies RT-210
Alcatel PBX 4400 Port 2533 kermit kermit unknown thanks to Nicolas Gregoire
Alcatel PBX 4400 Port 2533 dhs3mt dhs3mt unknown thanks to Nicolas Gregoire
Alcatel PBX 4400 Port 2533 at4400 at4400 unknown thanks to Nicolas Gregoire
Alcatel PBX 4400 Port 2533 mtch mtch unknown thanks to Nicolas Gregoire
Alcatel PBX 4400 Port 2533 mtcl mtcl unknown thanks to Nicolas Gregoire
Alcatel PBX 4400 Port 2533 root letacla unknown thanks to Nicolas Gregoire
Alcatel PBX 4400 Port 2533 dhs3pms dhs3pms unknown thanks to Nicolas Gregoire
Alcatel PBX 4400 Port 2533 adfexc adfexc unknown thanks to Nicolas Gregoire
Alcatel PBX 4400 Port 2533 client client unknown  
Alcatel PBX 4400 Port 2533 install llatsni unknown thanks to Nicolas
Alcatel PBX 4400 Port 2533 halt tlah unknown thanks to Nicolas
Alcatel Office 4200   Multi n/a 1064 Admin by Bazille
Alcatel OmniStack 6024   Telnet admin switch Admin  
Alcatel Omnistack/Omniswitch   Telnet/ diag switch Admin  
Alcatel Omnistack/omniswitch   Telnet diag switch Admin  
Alcatel Timestep VPN 1520 3.00.026 Permit config root permit Admin Perm/Config port 38036
Alcatel OXO 1.3 Multi (none) admin User  
Alcatel OmniPCX Office 4.1 FTP ftp_inst pbxk1064 Installer  
Alcatel OmniPCX Office 4.1 FTP ftp_admi kilo1987 Admin  
Alcatel OmniPCX Office 4.1 FTP ftp_oper help1954 Operator  
Alcatel OmniPCX Office 4.1 FTP ftp_nmc tuxalize NMC  
ALCATEL 4400   Console mtcl (none) User  
Alcatel 7300 ASAM   TL1 SUPERUSER ANS#150 Admin  
Allied Telesyn   Multi manager friend Admin  
Allied
Telesyn
AT-8024(GB)   Console n/a admin Admin  
Allied
Telesyn
AT-8024(GB)   HTTP manager admin Admin  
Allied
Telesyn
AT Router   HTTP root (none) Admin  
Allied
Telesyn
ALAT8326GB   Multi manager manager Admin  
Allied
Telesyn
AT8016F   Console manager friend Admin  
Allied
Telesyn
AT-AR130 (U) -10   HTTP Manager friend Admin Default IP is192.168.242.242
ALLNET T-DSL Modem Software Version: HTTP admin admin Admin  
Allnet ALL0275 802.11g AP 1.0.6 HTTP none admin Admin  
ALLNET ALL 130DSL     admin password    
Alteon ACEDirector3   console admin (none)    
Alteon ACEswitch 180e HTTP admin admin Admin  
Alteon ACEswitch 180e Telnet admin (none)    
Alteon ACEswitch 180e HTTP admin linga Admin none
Alteon AD4 9 Console admin admin Admin Factory default
AMBIT ADSL   Telnet root (none) Admin  
Ambit Cable Modem 60678eu 1.12 Multi root root Admin  
Ambit Cable Modem   Multi root root Admin Time Warner Cable issued
modem
Ambit ntl:home 200 2.67.1011 HTTP root root Admin This is the cable modem
supplied
Amitech wireless router and any HTTP admin admin Admin Web interface is
Andover
Controls
Infinity any Console acc acc Admin Building management system
AOC zenworks 4.0   Multi n/a admin Admin  
Apache Tomcat Web Server 5 HTTP admin (none) Admin  
APC 9606 Smart Slot   Telnet n/a backdoor Admin  
APC USV Network Management Card   SNMP n/a TENmanUFactOryPOWER Admin nachzulesen unter
http://www.
apc Smartups 3000   HTTP apc apc Admin By Sentinel Software.net
APC UPSes (Web/SNMP Mgmt Card)   HTTP device device Admin Secondary access account
APC Smart UPS   Multi apc apc Admin  
Apple AirPort Base Station
(Graphite)
2 Multi (none) public public See Apple article number
58613
Apple Airport Base Station (Dual
Ethernet)
2 Multi n/a password Guest See Apple article number
106597
Apple Airport Extreme Base Station 2 Multi n/a admin Guest see Apple article number
107518
Apple airport5 1.0.09 Multi root admin Admin 192.168.1.1
Apple Network Assistant     (none) xyzzy admin  
Applied
Innovations
AIscout   Multi scout scout supervisor  
Areca RAID controllers   Console admin 0 Admin  
Areca RAID controllers Any   admin 0 Administrator http://ArecaIP:81
Arescom modem/router 10XX Telnet n/a atc123 Admin  
ARtem ComPoint – CPD-XT-b CPD-XT-b Telnet (none) admin Admin  
Asante IntraSwitch   multi IntraSwitch Asante Admin  
Asante IntraStack   multi IntraStack Asante Admin  
Asante FM2008   Telnet superuser (none) Admin  
Asante FM2008   Multi admin asante Admin  
Ascend Yurie   Multi readonly lucenttech2    
Ascend Router   Telnet n/a ascend Admin  
Ascend Sahara   Multi root ascend    
Ascom Ascotel PBX ALL Multi (none) 3ascotel Admin no user req. _by DTK
asmack router ar804u HTTP admin epicrouter Admin  
ASMAX AR701u / ASMAX AR6024   HTTP admin epicrouter Admin  
ASMAX AR800C2   HTTP admin epicrouter Admin  
ASMAX AR800C2   HTTP admin epicrouter Admin  
Asmax Ar-804u   HTTP admin epicrouter Admin  
Aspect ACD 6 HTTP customer none User views error logs
Aspect ACD 6 Oracle DTA TJM User  
Aspect ACD 7 Oracle DTA TJM User  
Aspect ACD 8 Oracle DTA TJM User  
Asus wl503g All HTTP admin admin Admin  
Asus wl500 All HTTP admin admin Admin  
Asus wl300 All HTTP admin admin Admin  
ASUS WL-500G 1.7.5.6 HTTP admin admin Admin  
asus WL500g   HTTP admin admin Admin  
Asus WL500g Deluxe   HTTP admin admin Admin  
Asus P5P800   Multi n/a admin User  
ASUS ASUS WL-330 Pocket   HTTP admin admin Admin http://192.168.1.1
ASUS ASUS SMTA Router Firmware: 3.5.1.3 HTTP + Telnet admin admin Admin Router / VoIP Gateway
ATL P1000   Multi operator 1234 User Tape Library Operator Access
ATL P1000   Multi Service 5678 Service Maintenance Tape Library Service Access
Atlantis A02-RA141   Multi admin atlantis Admin  
Atlantis I-Storm Lan Router ADSL   Multi admin atlantis Admin (submit by fedematico)
AVAYA g3R v6 Console root ROOT500 Admin  
Avaya Definity G3Si Multi craft (none) Admin  
Avaya Cajun Pxxx   Multi root root Admin  
Avaya Cajun P550R P580 P880 Multi diag danger Developer  
Avaya Cajun P550R P580 P880 Multi manuf xxyyzz Developer  
Avaya Pxxx 41761 Multi diag danger Admin  
Avaya Pxxx 41761 Multi manuf xxyyzz Admin  
AVAYA Cajun P33x firmware before 3.11.0 SNMP n/a admin Admin check the Bugtraq archives
for
Avaya definity up to rev. 6 any craft crftpw Admin  
Avaya CMS Supervisor 11 Console root cms500 Admin  
Avaya Definity   Multi dadmin dadmin01 Admin  
AVAYA P333   Telnet Administrator ggdaseuaimhrke Admin  
AVAYA P333   Telnet root ggdaseuaimhrke Admin  
AVM Fritz!Box any   n/a 0 admin  
AVM Fritz!Box Fon 7270   n/a n/a   http://fritz.box
Avocent Cyclade Linux hostnamehere Multi root tslinux Admin http://www.cyclades.com.au
Axis NETCAM 200/240 Telnet root pass Admin  
Axis All Axis Printserver All Multi root pass Admin  
Axis Webcams   HTTP root pass Admin  
Axis 540/542 Print Server   Multi root pass Admin  
axis 2100   Multi n/a (none) Admin  
Axis NETCAM 200/240   root pass    
AXUS AXUS YOTTA   Multi n/a 0 Admin Storage DAS SATA to SCSI/FC
aztech DSL-600E   HTTP admin admin Admin  
Aztecj DSL 600EU 62.53.2 Telnet root admin Admin  
Aztecj DSL 600EU 62.53.2 HTTP isp isp Admin backdoor – not in all f/w
versions
Bausch
Datacom
Proxima PRI ADSL PSTN   Multi admin epicrouter Admin  
Bay
Networks
Switch 350T Telnet n/a NetICs Admin  
Bay
Networks
SuperStack II   Telnet security security Admin  
Bay
Networks
Router   Telnet User (none) User  
Bay
Networks
Router   Telnet Manager (none) Admin  
Bay
Networks
Router     User (none) User  
Bay
Networks
SuperStack II     security security Admin  
Bay
Networks
Switch 350T   n/a NetICs Admin  
BBR-4HG              
BBR-4MG
and
BUFFALO ALL HTTP root n/a Admin  
Beetel ADSL Modem 220X Multi admin password Admin Beetel Model Provided By
Airtel
Belkin F5D6130   SNMP (none) MiniAP Admin Wireless Acess Point
IEEE802.11b
Belkin F5D7150 FB Multi n/a admin Admin  
Benq awl 700 wireless router 1.3.6 Beta-002 Multi admin admin Admin  
Billion Bipac 5100   HTTP admin admin Admin  
Billion BIPAC-640 AC 640AE100 HTTP (none) (none) Admin  
Bintec Bianka Routers   Multi admin bintec Admin  
BinTec Bianca/Brick XM-5.1 SNMP n/a snmp-Trap read/write by rootkid
BinTec x1200 37834 Multi admin bintec Admin  
BinTec x2300i 37834 Multi admin bintec Admin  
BinTec x3200 37834 Multi admin bintec Admin  
Blue
Coat Systems
ProxySG 3.x HTTP admin articon Admin access to command line
interface
Bluecoat ProxySG (all model) SGOS 3 / SGOS4 HTTPS (8082) admin admin Admin  
BMC Patrol 6 Multi patrol patrol User  
BMC
Software
Patrol all BMC unique Administrator the same all over Admin this default user normally
for ALL
Bosch NWC-0455 Dinion IP Cameras     service service admin may work in other bosch
Bosch NWC-0455 Dinion IP Cameras     user user regular user  
Bosch NWC-0455 Dinion IP Cameras     live live monitor – low priv  
Breezecom Breezecom Adapters 3.x   n/a Master Admin  
Breezecom Breezecom Adapters 2.x   n/a laflaf Admin  
Breezecom Breezecom Adapters 4.4.x Console n/a Helpdesk Admin  
Breezecom Breezecom Adapters 4.x   n/a Super    
Breezecom Breezecom Adapters 3.x   n/a Master    
Breezecom Breezecom Adapters 2.x   n/a laflaf    
Broadlogic XLT router   HTTP webadmin webadmin Admin  
Broadlogic XLT router   Telnet admin admin Admin  
Broadlogic XLT router   Telnet installer installer Admin  
Brocade Fabric OS All Multi root fivranne Admin Gigiabit SAN (by Nicolas
Gregoire)
Brocade Silkworm all Multi admin password Admin Also on other Fiberchannel
Brocade Fabric OS   Multi admin password Admin Gigabit SAN
Brocade Fabric OS 5320   user password user Also on other SAN equipment
Brocade Fabric OS     root Serv4EMC root  
Brocade Fabric OS     factory Fact4EMC wipe? I think this may wipe the
device
Brother NC-3100h     (none) access network board access  
Brother NC-4100h     (none) access network board access  
Brother HL-1270n   Multi n/a access network board access  
Brother NC-2100p   Multi (none) access Admin NC-2100p Print Server
Brother MFC-420CN Firmware Ver.C Multi n/a access Admin multifunction printer copier
Brother HL5270DN   HTTP admin access Admin  
Brother MFC-7225     admin access admin  
Buffalo Wireless Broadband Base WLA-G54 WBR-G54 HTTP root (none) Admin http://192.168.11.1
BUFFALO WLAR-L11-L / WLAR-L11G-L   HTTP root (none) Admin  
Buffalo WHR-G300N     root   Administrator  
Buffalo
Technology
TeraStation   Multi admin password Admin  
Cable
And Wireless
ADSL Modem/Router   Multi admin 1234 Admin  
Cabletron Netgear modem/router     netman (none) Admin  
canyon router   Multi Administrator admin Admin  
Cayman Cayman DSL     n/a (none) Admin  
Celerity Mediator Multi Multi mediator mediator User  
Celerity Mediator   Multi root Mau’dib Admin Assumption: the password is
Cellit CCPro   Multi cellit cellit Admin  
Checkpoint SecurePlatform NG FP3 Console admin admin Admin  
CipherTrust IronMail Any Multi admin password Admin  
CISCO Cache Engine   Console admin diamond Admin  
Cisco ConfigMaker     cmaker cmaker Admin  
cisco cva 122   Telnet admin admin Admin  
Cisco CNR All CNR GUI admin changeme Admin This is the default password
for
Cisco Netranger/secure IDS   Multi netrangr attack    
Cisco BBSM 5.0 and 5.1 Telnet or Named bbsd-client changeme2 database The BBSD Windows Client
Cisco BBSD MSDE Client 5.0 and 5.1 Telnet or Named bbsd-client NULL database The BBSD Windows Client
Cisco BBSM Administrator 5.0 and 5.1 Multi Administrator changeme Admin  
Cisco Netranger/secure IDS 3.0(5)S17 Multi root attack Admin must be changed at
Cisco BBSM MSDE Administrator 5.0 and 5.1 IP and sa (none) Admin  
Cisco Catalyst 4000/5000/6000 All SNMP (none) public/private/secret RO/RW/RW+change default on All Cat switches
running the native CatOS CLI software.
Cisco PIX firewall   Telnet (none) cisco User  
Cisco VPN Concentrator 3000 series 3 Multi admin admin Admin  
Cisco Content Engine   Telnet admin default Admin  
cisco 3600   Telnet Administrator admin Guest  
Cisco AP1200 IOS Multi Cisco Cisco Admin This is when you convert
AP1200
cisco GSR   Telnet admin admin admin  
Cisco CiscoWorks 2000     guest (none) User  
Cisco CiscoWorks 2000     admin cisco Admin  
Cisco ConfigMaker     cmaker cmaker Admin  
Cisco Ciso Aironet 1100 series Rev. 01 HTTP (none) Cisco Admin  
cisco 2600   Telnet Administrator admin Admin  
Cisco Aironet   Multi (none) _Cisco Admin  
Cisco Aironet   Multi Cisco Cisco Admin  
Cisco HSE   Multi root blender Admin  
Cisco HSE   Multi hsa hsadb Admin  
Cisco WLSE   Multi root blender Admin  
Cisco WLSE   Multi wlse wlsedb Admin  
Cisco Aironet 1200   HTTP root Cisco Admin  
Cisco CallManager   HTTP admin admin Admin nabil ouchn
Cisco WSLE all all wlseuser wlsepassword User see also enable passwd
Cisco WLSE all Console enable (none) enable use with wlseuser
Cisco Cisco Wireless Location
Appliance
2700 Series prior to
2.1.34.0
Multi root password Admin Added by DPL admin. From
Cisco MeetingPlace   Console technician 2 + last 4 of Audio Admin Used for Audio Server or
Cisco ONS all Multi CISCO15 otbu+1 Admin Optical Network System –
http/TL1
cisco 2600 router   Telnet cisco (none) Admin  
Cisco PIX 6.3 Console enable (none) Admin  
Cisco-Arrowpoint Arrowpoint     admin system Admin  
Citel Handset Gateway   HTTP citel password Admin  
Citel Handset Gateway   Telnet (none) citel Admin  
CNET CNET 4PORT ADSL MODEM CNAD NF400 Multi admin epicrouter Admin  
CNET CSH-2400W unk HTTP admin 1234 Admin  
CNet CWR- 500 Wireless-B Router     Admin admin Admin  
Colubris MSC   HTTP admin admin User for all Colubris Devices
COM3 OLe   HTTP admin admin User  
Comcast
Home Networking
Comcast Home Networking ALL HTTP comcast (none) Admin  
Compaq Insight Manager     administrator administrator Admin  
Compaq Insight Manager     anonymous (none) User  
Compaq Insight Manager     user user User  
Compaq Insight Manager     operator operator    
Compaq Insight Manager     user public User  
Compaq Insight Manager     PFCUser 240653C9467E45 User  
comtrend ct536+   Multi admin (none) Admin  
Comtrend ct-536+   HTTP admin admin Admin  
Comtrend ct-536+   HTTP admin 1234 Admin  
Conceptronic C54BRS4   Multi admin 1234 Admin Its a Generic Router From
conexant ACCESS RUNNER ADSL   Telnet Administrator admin Admin  
Conexant Router   HTTP n/a epicrouter Admin  
Conexant Router   HTTP n/a admin Admin yes
Corecess Corecess 3112   HTTP Administrator admin Admin  
Corecess 6808 APC   Telnet corecess corecess User  
corecess 3113   Multi admin (none) Admin  
creative 2015U   Multi n/a (none) Admin  
Crossbeam COS / XOS   Lilo boot (none) x40rocks Admin At the LILO boot prompt type
CTC
Union
ATU-R130 81001a Multi root root Admin  
cuproplus bus   Multi n/a (none) Admin  
cyberguard all firewalls all console + passport1 cgadmin cgadmin Admin  
Cyclades PR 1000   Telnet super surt Admin mpacheco.inimigo.com
Cyclades TS800   HTTP root tslinux Admin mpacheco.inimigo.com
D9287ar Pavilion6640c     Clarissa      
Dallas
Semiconductors
TINI embedded JAVA Module <= 1.0 Telnet root tini Admin  
Datacom BSASX/101     n/a letmein Admin  
Datawizard.net FTPXQ server   FTP anonymous any@ read/write on c:,  
Davolink DV2020   HTTP user user unknown  
Davox Unison   Multi root davox Admin  
Davox Unison   Multi admin admin User  
Davox Unison   Multi davox davox User  
Davox Unison   Sybase sa (none) Admin  
Deerfield MDaemon   HTTP MDaemon MServer Admin web interface to manage
MDaemon. fixed June 2002
Dell Laser Printer 3000cn / 3100cn   HTTP admin password Admin  
Dell Remote Access Card   HTTP root calvin Admin  
Dell 2161DS Console Switch   HTTP Admin (none) Admin case sensitive username
Dell PowerConnect 2724   HTTP admin (none) Admin  
Dell WRTA-108GD     admin admin Admin 192.168.2.1
Demarc Network Monitor   multi admin my_DEMARC Admin  
Deutsch
Telekomm
T-Sinus 130 DSL   HTTP (none) 0 Admin  
Deutsche
Telekom
T-Sinus DSL 130   HTTP admin (none) Admin Usuallay also a WirelessLan
AP 🙂
Deutsche
Telekom
T-Sinus 154 DSL 13.9.38 HTTP (none) 0 Admin thx to AwdCzAb
Deutsche
Telekom
T-Sinus 1054 DSL All HTTP (none) 0 Admin  
Develcon Orbitor Default Console     n/a BRIDGE Admin  
Develcon Orbitor Default Console     n/a password Admin  
DI624 D-LINK C3 HTTP admin password Admin hardcoded for Verizon FiOS
Dictaphone ProLog     PBX PBX    
Dictaphone ProLog     NETWORK NETWORK    
Dictaphone ProLog     NETOP (none)    
Digicom Michelangelo   Multi admin michelangelo Admin  
Digicom Michelangelo   Multi user password User  
digicom Wavegate 54C   HTTP Admin (none) Admin  
DIGICOM Michelangelo Wave108   HTTP root admin Admin  
Digicorp Viper   Telnet n/a BRIDGE Admin  
Digicorp Viper   Telnet n/a password Admin  
Digicorp Router     n/a BRIDGE Admin  
Digicorp Router     n/a password Admin  
Dlink DSL-500   Multi admin admin Admin  
dlink adsl   HTTP admin admin Admin  
DLINK 604   Multi n/a admin Admin  
D-Link hubs/switches   Telnet D-Link D-Link    
D-Link DI-704 rev a Multi (none) admin Admin Cable/DSL Routers/Switches
D-Link DI-804 v2.03 Multi admin (none) Admin Contributed by _CR_
D-Link DWL 900AP   Multi (none) public Admin  
D-Link DI-614+   HTTP user (none) User by rootkid
D-Link DWL-614+ rev a rev b HTTP admin (none) Admin http://192.168.0.1
D-Link D-704P rev b Multi admin (none) Admin  
D-link DWL-900AP+ rev a rev b rev c HTTP admin (none) Admin http://192.168.0.50
D-Link DI-604 rev a rev b rev c rev e Multi admin (none) Admin http://192.168.0.1
D-Link DWL-614+ 2.03 HTTP admin (none) Admin  
D-Link D-704P   Multi admin admin Admin  
D-Link DWL-900+   HTTP admin (none) Admin  
D-Link DI-704   Multi n/a admin Admin  
D-Link DI-604 1.62b+ HTTP admin (none) Admin  
D-Link DI-624 all HTTP admin (none) Admin  
D-Link DI-624 all HTTP User (none) Admin  
D-Link DI-604 2.02 HTTP admin admin Admin  
D-Link DWL 1000   HTTP admin (none) Admin  
D-Link DI-514   Multi user (none) Admin  
D-Link DI-614+ any HTTP admin (none) Admin all access 😀
D-Link DWL 2100AP   Multi admin (none) Admin  
D-LINK DSL-G664T A1 HTTP admin admin Admin SSID : G664T_WIRELESS
D-link 504g adsl router   HTTP admin admin Admin from product doco
D-Link DSL-302G   Multi admin admin Admin  
D-Link DI-624+ A3 HTTP admin admin Admin  
D-Link DWL-2000AP+ 1.13 HTTP admin (none) Admin Wireless Access Point
D-Link DI-614+   HTTP admin admin Admin  
D-Link Dsl-300g+ Teo Telnet (none) private Admin  
D-Link DSL-300g+ Teo HTTP admin admin Admin  
D-Link DI-524 all HTTP admin (none) Admin http://192.168.0.1
D-Link firewall dfl-200 HTTP admin admin Admin  
D-link DSL500G   Multi admin admin Admin  
d-link di-524   HTTP admin (none) Admin  
D-link DSL-504T   HTTP admin admin Admin  
D-link DSL-G604T   Multi admin admin Admin  
D-link Di-707p router   HTTP admin (none) Admin  
D-Link DI-524 all HTTP user (none) User  
D-link ads500g   HTTP admin admin Admin  
D-Link DI-634M   Multi admin (none) Admin  
D-Link DI-524 E1 Telnet Alphanetworks wrgg15_di524 Admin Password is actually
firmware
D-Link DWL-G730AP 1.1 HTTP admin (none) Admin http://192.168.0.30
D-Link G624T   Multi admin admin Admin  
D-Link WBR-1310 B-1 Multi admin (none) Admin  
Draytek Vigor all HTTP admin admin Admin  
Draytek Vigor 2600   HTTP admin (none) Admin  
Draytek Vigor 2900+   HTTP admin admin Admin  
Draytek Vigor3300 series   Telnet draytek 1234 Admin  
Dynalink RTA230   Multi admin admin Admin  
E-Con Econ DSL Router   Router admin epicrouter Admin DSL Router
Edimax Broadband Router Hardware: Rev A. HTTP admin 1234 Admin  
Edimax EW-7205APL Firmware release Multi guest (none) Admin http://secunia.com/advisories/
Edimax ES-5224RXM   Multi admin 123 Admin  
edimax wireless adsl router AR-7024 Multi admin epicrouter Admin  
Edimax EW-7206APG   HTTP admin 1234 Admin  
Edimax Edimax Fast Ethernet Switch   HTTP admin password Admin  
Edimax PS-1208MFG     edimax software01 Admin for most Edimax HW????
Edimax PS-1203/PS-1205Um/PS-3103 ( not applicable )   admin (none) OR su@psir Administration  
Efficient Speedstream DSL   Telnet n/a admin Admin  
Efficient 5871 DSL Router v 5.3.3-0 Multi login admin Admin This is for access to HTTP
Efficient 5851   Telnet login password Admin might be all 5800 series
Efficient Speedstream DSL     n/a admin Admin  
Efficient
Networks
Speedstream 5711 Teledanmark version Console n/a 4getme2 Admin for all your TDC router
needs
Efficient
Networks
EN 5861   Telnet login admin Admin  
Efficient
Networks
5851 SDSL Router N/A Console (none) hs7mwxkk Admin On some Covad Routers
Elsa LANCom Office ISDN Router 800/1000/1100 Telnet n/a cisco Admin  
EMC DS-4100B   Console admin (none) Admin EMC Fiber Switch
Enterasys ANG-1105 unknown HTTP admin netadmin Admin default IP is 192.168.1.1
Enterasys ANG-1105 unknown Telnet (none) netadmin Admin default IP is 192.168.1.1
Enterasys Vertical Horizon ANY Multi admin (none) Admin this works in telnet or http
Enterasys Vertical Horizon VH-2402S Multi tiger tiger123 Admin  
Entrust getAccess 4.x and 7.x Web Admin gui websecadm changeme Admin Access to Admin Gui via
/sek-bin/
Ericsson Ericsson Acc     netman netman    
ericsson md110 pabx up-to-bc9 Multi (none) help varies depending on  
ericsson ericsson acc   Multi n/a (none) Admin  
Ericsson Ericsson Acc     netman netman    
Ericsson MD110   Telnet MD110 help Admin  
Ericsson BP250   HTTP admin default Admin  
Ericsson SBG 3.1   expert expert    
Ericsson
ACC
Tigris Platform All Multi public (none) Guest  
E-Tech ADSL Ethernet Router Annex A v2 HTTP admin epicrouter Admin Password can also be
password
E-Tech Wireless 11Mbps Router   HTTP (none) admin Admin  
E-Tech Router RTBR03 HTTP (none) admin Admin 1wan/4ports switch router
EverFocus PowerPlex EDR1600 Multi admin admin Admin  
EverFocus PowerPlex EDR1600 Multi supervisor supervisor Admin  
EverFocus PowerPlex EDR1600 Multi operator operator Admin  
Exabyte Magnum20   FTP anonymous Exabyte Admin  
Extended
Systems
Print Servers   admin extendnet Admin  
Extreme
Networks
All Switches   Multi admin (none) Admin Submitted by Eastman Rivai
F5 Bigip 540   Multi root default Admin  
F5-Networks BIGIP   Multi n/a (none) Admin  
Flowpoint 2200 SDSL   Telnet admin admin Admin  
Flowpoint DSL   Telnet n/a password Admin Installed by Covad
Flowpoint 100 IDSN   Telnet admin admin Admin  
Flowpoint 40 IDSL   Telnet admin admin Admin  
Flowpoint Flowpoint DSL     admin admin Admin  
fon La fonera 0.7.1 r1 HTTP admin admin Admin fon.com
Fortinet Fortigate   Telnet admin (none) Admin  
Fortinet Fortigate   Console maintainer bcpb+serial# Admin serial# has to be in caps
Fortinet Fortigate   Console maintainer admin Admin  
Foundry
Networks
IronView Network Manager Version 01.6.00a HTTP admin admin Admin http://www.foundrynet.com/
Freetech PC BIOS   Console n/a Posterie Admin  
Freetech BIOS   Console n/a Posterie Admin  
Fujitsu
Siemens
Routers   HTTP (none) connect Admin  
Fujitsu
Siemens
Fibre Channel SAN storage   HTTP manage !manage Admin  
Fujitsu
Siemens
Fibre Channel SAN storage   Telnet manage !manage Admin  
Funk
Software
Steel Belted Radius 3.x Proprietary admin radius Admin  
Gericom Phoenix   Multi Administrator (none) Admin  
giga 8ippro1000   Multi Administrator admin Admin  
Grandstream GXP-2000   HTTP admin 1234 Admin  
greatspeed DSL   HTTP netadmin nimdaten Admin ETB Colombia
Guru Wireless ADSL2   HTTP admin admin Admin  
GVC e800/rb4   HTTP Administrator admin Admin  
Hewlett
Packard
Power Manager 3 HTTP admin admin Admin  
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR HPP187    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR HPP189    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR HPP196    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR INTX3    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR ITF3000    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR NETBASE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR REGO    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR RJE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR CONV    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi OPERATOR SYS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi OPERATOR DISC    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi OPERATOR SYSTEM    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi OPERATOR SUPPORT    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi OPERATOR COGNOS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi PCUSER SYS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi RSBCMON SYS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi SPOOLMAN HPOFFICE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi WP HPOFFICE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi ADVMAIL HPOFFICE DATA    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi ADVMAIL HP    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi FIELD SUPPORT    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi FIELD MGR    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi FIELD SERVICE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi FIELD MANAGER    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi FIELD HPP187 SYS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi FIELD LOTUS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi FIELD HPWORD PUB    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi FIELD HPONLY    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi HELLO MANAGER.SYS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi HELLO MGR.SYS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi HELLO FIELD.SUPPORT    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi HELLO OP.OPERATOR    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MAIL MAIL    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MAIL REMOTE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MAIL TELESUP    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MAIL HPOFFICE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MAIL MPE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MANAGER TCH    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MANAGER SYS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MANAGER SECURITY    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MANAGER ITF3000    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MANAGER HPOFFICE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MANAGER COGNOS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MANAGER TELESUP    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR SYS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR CAROLIAN    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR VESOFT    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR XLSERVER    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR SECURITY    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR TELESUP    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR HPDESK    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR CCC    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR CNAS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR WORD    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR COGNOS    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR ROBELLE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR HPOFFICE    
Hewlett-Packard HP 2000/3000 MPE/xx   Multi MGR HPONLY    
Hewlett-Packard LaserJet Net Printers Ones with Jetdirect Telnet (none) (none) Admin press enter twice if no
response
Hewlett-Packard LaserJet Net Printers Ones with Jetdirect HTTP (none) (none) Admin HTTP interface -submit
Hewlett-Packard LaserJet Net Printers Ones with Jetdirect FTP Anonymous (none) User send files to be printed
-submit
Hewlett-Packard LaserJet Net Printers Ones with Jetdirect 9100 (none) (none) User Type what you want and
Hewlett-Packard webmin 0.84 HTTP admin hp.com Admin you can find more passwords
hp sa7200   Multi admin admin Admin  
hp sa7200   Multi admin (none) Admin  
HP ISEE   Multi admin isee Admin  
hp 2300   Multi admin admin Admin  
HP MSL Series Libraries   Multi Factory 56789 Admin Factory password under
Utilities.
HP t5000 Thin Client series   Console Administrator admin Admin  
HP E1200 Network Storage Router   root password admin  
Huawei E960     admin admin Admin  
Huawei MT880r   Multi TMAR#HWMT8007079 (none) Admin mpacheco.inimigo.com
Huawei mt820 V100R006C01B021 HTTP admin admin Admin Telefonica Colombia ADSL
Huawei MT880   HTTP admin admin Admin  
huawei
incorporate
k3765 9.4.3.16284   admin admin    
iblitzz BWA711/All Models All HTTP admin admin Admin This Information Works On
All
IBM Ascend OEM Routers   Telnet n/a ascend Admin  
IBM A21m   Multi n/a (none) Admin  
IBM 390e   Multi n/a admin Admin  
ibm a20m   Multi n/a admin Admin  
IBM TotalStorage Enterprise
Server
  Multi storwatch specialist Admin By Nicolas Gregoire
IBM 8239 Token Ring HUB 2.5 Console n/a R1QTPS Utility Program submitted by FX
IBM 8224 HUB   Multi vt100 public Admin Swap MAC address chip from
IBM 3534 F08 Fibre Switch   Multi admin password Admin  
IBM switch 8275-217 Telnet admin (none) Admin  
IBM Directory – Web 5.1 HTTP superadmin secret Admin Documented in Web
Administration Guide
IBM Hardware Management 3 ssh hscroot abc123 Admin  
IBM 3583 Tape Library   HTTP admin secure Admin  
IBM Infoprint 6700 http://www.phenoelit. Multi root (none) Admin Also works for older 4400
printers
IBM T20   Multi n/a admin Admin  
IBM IBM   Multi n/a (none) Admin  
IBM Remote Supervisor Adapter
(RSA)
  HTTP USERID PASSW0RD Admin  
IBM BladeCenter Mgmt Console   HTTP USERID PASSW0RD Admin  
IBM T42   HTTP Administrator admin Admin  
iDirect iNFINITY series 3000/5000/7000 Telnet admin P@55w0rd! Admin to enable ssh connections to
the
iDirect iNFINITY series 3000/5000/7000 ssh root iDirect Admin first enable sshd telnet to
router:
ihoi oihoh lknlkn HTTP Administrator pilou Admin  
IMAI Traffic Shaper TS-1012 HTTP n/a (none) Admin default IP 1.2.3.4
inchon inchon inchon Multi admin admin Admin inchon
infacta group mail   Multi Administrator (none) Admin  
Infoblox INFOBLOX Appliance   Multi admin (none) Admin  
Infosmart SOHO router   HTTP admin 0 Admin  
INOVA ONT4BKP (IP clock) all Telnet iclock timely Admin Network clock
Integral RemoteView 4 Console Administrator letmein Admin  
Intel Shiva   Multi root (none) Admin  
Intel Express 9520 Router   Multi NICONEX NICONEX User  
Intel Express 520T Switch   Multi setup setup User  
intel netstructure 480t Telnet admin (none) Admin  
Intel Wireless AP 2011 2.21 Multi (none) Intel Admin by FX
Intel Wireless Gateway 3.x HTTP intel intel Admin  
Intel Shiva     Guest (none) User  
Intel Shiva     root (none) Admin  
Intel/Shiva Mezza ISDN Router All Telnet admin hello Admin  
Intel/Shiva Access Port All Telnet admin hello Admin  
Interbase Interbase Database Server All Multi SYSDBA masterkey Admin  
Intermec Mobile LAN 5.25 Multi intermec intermec Admin  
Intershop Intershop 4 HTTP operator $chwarzepumpe Admin  
Intersystems Cache Post-RDMS   Console system sys Admin Change immediately
intex organizer   Multi n/a (none) Admin  
Intracom jetSpeed 520/520i Multi admin admin Admin L3x
Inventel Livebox   Multi admin admin Admin  
ion nelu nel Multi n/a admin Admin vreau ceva
ion nelu nel Multi Administrator admin Admin vreau ceva
iPSTAR iPSTAR Satellite Router/Radio v2 HTTP admin operator Admin For CSLoxInfo and iPSTAR
Customers
iPSTAR iPSTAR Network Box v.2+ HTTP admin operator Admin iPSTAR Network Box is used
Irongate NetSurvibox 266 1 HTTP admin NetSurvibox Admin  
IronPort Messaging Gateway Appliance   Multi admin ironport Admin  
JAHT adsl router AR41/2A HTTP admin epicrouter Admin  
JD
Edwards
WorldVision/OneWorld All(?) Console JDE JDE Admin/SECOFR  
JDE WorldVision/OneWorld   Multi PRODDTA PRODDTA Admin Owner of database tables and
JDS Hydra 3000 r2.02 Console hydrasna (none) Admin www.hydrasystems.com/
Juniper ISG2000   Multi netscreen netscreen Admin Just a note – netscreen is
now made by Juniper – otherwise no change
Juniper Netscreen 3.2 Console serial# serial# Admin Resets to factory settings
Kalatel Calibur DSR-2000e   Multi n/a 3477 Admin  
Kalatel Calibur DSR-2000e   on-screen n/a 8111 restore factory  
KASDA KD318-MUI kasda adsl router Multi admin adslroot Admin  
Konica
Minolta
magicolor 2300 DL   Multi (none) 1234 Admin info from:
ftp://ftp.minolta-qms.com/pub/cts/out_going/
Konica
Minolta
magicolor 2430DL All Multi (none) (none) Admin Taken from reference manual
Konica
Minolta
magicolor 5430 DL   HTTP admin administrator Admin  
Konica
Minolta
magicolor 1690MF     (non) sysAdmin Administrator  
Konica
Minolta
magicolor 1690MF     (non) sysAdmin Administrator  
Konica/
Minolta
Di 2010f n/a HTTP n/a 0 Admin Printer configuration
interface
KTI KS-2260   Telnet superuser 123456 special CLI can be disabled by renaming
the
KTI KS2600   Console admin 123456 Admin  
KTI KS2260   Console admin 123 Admin  
Kyocera EcoLink 7.2 HTTP n/a PASSWORD Admin  
Kyocera Telnet Server IB-20/21   multi root root Admin  
Kyocera Intermate LAN FS Pro 10/100 K82_0371 HTTP admin admin Admin  
Kyocera Printer any   (none) admin00    
Kyocera FS-2020D     admin00 Admin  
Kyocera
Printers
2020D     n/a admin00 Admin  
LANCOM IL11   Multi n/a (none) Admin  
Lanier Digital Imager LD124c HTTP admin (none) Admin  
Lanier LD335   HTTP supervisor (none) Admin  
Lantronics Lantronics Terminal Server   TCP 7000 n/a access Admin  
Lantronics Lantronics Terminal Server   TCP 7000 n/a system Admin  
Lantronix Lantronix Terminal   TCP 7000 n/a lantronix Admin  
Lantronix SCS1620   Multi sysadmin PASS Admin 9600/N/8/1 XON/XOFF
Lantronix SCS3200   EZWebCon login access Admin secondary port settings
login:
Lantronix SCS400   Multi n/a admin Admin secondary priv. password:
Lantronix SCS200   Multi n/a admin Admin secondary priv. password:
system
Lantronix SCS100   Multi n/a access Admin secondary priv. password:
system
Lantronix ETS4P   Multi n/a (none) Admin secondary priv. password:
system
Lantronix ETS16P   Multi n/a (none) Admin secondary priv. password:
system
Lantronix ETS32PR   Multi n/a (none) Admin secondary priv. password:
system
Lantronix ETS422PR   Multi n/a (none) Admin secondary priv. password:
system
latis
network
border guard   Multi n/a (none) Admin  
LAXO IS-194G 1.0a   admin admin admin 192.168.1.254
Leviton 47611-GT5   Multi admin leviton Admin  
LG Aria iPECS All Console (none) jannie maintenance dealer backdoor password
LG LAM200E / LAM200R   Multi admin epicrouter Admin  
Linksys WAP11   Multi n/a (none) Admin  
Linksys DSL   Telnet n/a admin Admin  
Linksys EtherFast Cable/DSL ROuter   Multi Administrator admin Admin  
Linksys Linksys Router DSL/Cable   HTTP (none) admin Admin  
Linksys BEFW11S4 1 HTTP admin (none) Admin  
Linksys BEFSR41 2 HTTP (none) admin Admin  
Linksys WRT54G   HTTP admin admin Admin  
Linksys WAG54G   HTTP admin admin Admin  
linksys ap 1120   Multi n/a (none) Admin  
Linksys Linksys DSL     n/a admin Admin  
Linksys WAP54G 2 HTTP (none) admin Admin  
Linksys WRT54G All Revisions HTTP (none) admin Admin  
Linksys model WRT54GC compact   Multi (none) admin Admin  
Linksys AG 241 – ADSL2 Gateway   Multi admin admin Admin  
Linksys Comcast Comcast-supplied HTTP comcast 1234 diagnostics 192.168.0.1/docsisdevicestatus.asp
Linksys WAG54GS   Multi admin admin Admin  
Linksys rv082   Multi admin (none) Admin  
linksys wrt54g   Multi admin admin Admin  
Linksys WRT54GS V4 HTTP admin admin Admin  
Linksys WAG354G 2 HTTP admin admin Admin Applies to other linksys too
linksys wag354g   Telnet admin admin User  
linksys BEFW11S4 2 Multi (none) admin Admin Comes up as BEFW11S4 V.2
Linksys ADSLME3     root orion99 Admin From Telus ISP (Canada)
Linksys/
Cisco
RTP300 w/2 phone ports 1 HTTP admin admin Admin  
Linksys/
Cisco
RTP300 w/2 phone ports 1 HTTP user tivonpw update access use for flashing firmware
Livingston IRX Router   Telnet !root (none)    
Livingston Livingston Portmaster 3   Telnet !root (none)    
Livingston Officerouter   Telnet !root (none)    
Livingstone Portmaster 2R   Telnet root (none) Admin  
Lockdown All Lockdown Products up to 2.7 Console setup changeme (exclamation) User  
LogiLink WL0026 1.68   admin 1234 Admin Realtek chipset. Default IP
192.168.2.1
Logitech Logitech Mobile Headset   Bluetooth (none) 0 audio access Thierry Zoller
(Thierry@sniff-em.com)
longshine isscfg   HTTP admin 0 Admin  
Lucent B-STDX9000   Multi (any 3 characters) cascade    
Lucent B-STDX9000   debug mode n/a cascade    
Lucent B-STDX9000 all SNMP n/a cascade Admin  
Lucent CBX 500   Multi (any 3 characters) cascade    
Lucent CBX 500   debug mode n/a cascade    
Lucent GX 550   SNMP readwrite n/a cascade    
Lucent MAX-TNT   Multi admin Ascend    
Lucent PSAX 1200 and below   Multi root ascend    
Lucent PSAX 1250 and above   Multi readwrite lucenttech1 Admin  
Lucent PSAX 1250 and above   Multi readonly lucenttech2 Admin  
Lucent Anymedia   Console LUCENT01 UI-PSWD-01 Admin requires GSI software
Lucent Anymedia   Console LUCENT02 UI-PSWD-02 Admin requires GSI software
Lucent PacketStar   Multi Administrator (none) Admin  
Lucent Cellpipe 22A-BX-AR USB D   Console admin AitbISP4eCiG Admin  
LUCENT M770   Telnet super super Admin  
Lucent System 75     bciim bciimpw    
Lucent System 75     bcim bcimpw    
Lucent System 75     bcms bcmspw    
Lucent System 75     bcnas bcnaspw    
Lucent System 75     blue bluepw    
Lucent System 75     browse browsepw    
Lucent System 75     browse looker    
Lucent System 75     craft craft    
Lucent System 75     craft craftpw    
Lucent System 75     cust custpw    
Lucent System 75     enquiry enquirypw    
Lucent System 75     field support    
Lucent System 75     inads indspw    
Lucent System 75     inads inads    
Lucent System 75     init initpw    
Lucent System 75     locate locatepw    
Lucent System 75     maint maintpw    
Lucent System 75     maint rwmaint    
Lucent System 75     nms nmspw    
Lucent System 75     rcust rcustpw    
Lucent System 75     support supportpw    
Lucent System 75     tech field    
Lucent Cellpipe 20A-GX-UK Console n/a admin Admin  
m0n0wall m0n0wall 1.3   admin mono Administrator Firewall
m0n0wall m0n0wall 1.3   admin mono Administrator Firewall
Marconi Fore ATM Switches   Multi ami (none) Admin  
maxdata ms2137   Multi n/a (none) Admin  
maxdata 7000x   Multi n/a (none) Admin  
McAfee SCM 3100 4.1 Multi scmadmin scmchangeme Admin  
McData FC Switches/Directors   Multi Administrator password Admin  
McData i10k Switch     McdataSE redips admin  
Mediatrix MDD 2400/2600   Console administrator (none) Admin From the Getting Started
Guide
mediatrix
2102
mediatrix 2102   HTTP admin 1234 Admin  
medion Routers   HTTP n/a medion Admin  
Megastar BIOS   Console n/a star Admin  
Mentec Micro/RSX   Multi MICRO RSX Admin  
Mentec Micro/RSX     MICRO RSX Admin  
MERCURY 234234 234234 SNMP Administrator admin Admin  
MERCURY KT133A/686B   SNMP Administrator admin Admin  
Meridian PBX ANY Telnet service smile System This is the default password
Micronet Access Point SP912 Telnet root default Admin  
Micronet Micronet SP5002   Console mac (none) Admin  
Micronet 3351 / 3354   Multi admin epicrouter Admin  
Microplex Print Server   Telnet root root Admin  
Microprocessing             h3kdocs/H3R25C04.pdf
microRouter 900i   Console/Multi n/a letmein Admin  
Mikrotik Router OS all Telnet admin (none) Admin also for SSH and Web access
Mikrotik Router OS 42775 HTTP admin (none) Admin  
Mikrotik Mikrotik   Telnet admin (none) Admin  
Milan mil-sm801p   Multi root root Admin  
Minolta
PagrPro
QMS 4100GN PagePro   HTTP n/a sysadm Admin  
Minolta
QMS
Magicolor 3100 3.0.0 HTTP operator (none) Admin  
Minolta
QMS
Magicolor 3100 3.0.0 HTTP admin (none) Admin Gives access toAccounting
Mintel Mintel PBX     n/a SYSTEM Admin  
Mintel Mintel PBX     n/a SYSTEM Admin  
Mitel 3300 ICP all HTTP system password Admin  
Mitel SX2000 all Multi n/a (none) Admin  
Motorola Cablerouter   Telnet cablecom router Admin  
Motorola WR850G 4.03 HTTP admin motorola Admin higher revisions likely the
same
Motorola Wireless Router WR850G HTTP admin motorola Admin  
Motorola SBG900   HTTP admin motorola Admin  
Motorola Motorola Cablerouter     cablecom router Admin  
motorola vanguard   Multi n/a (none) Admin  
motorola sgb900   HTTP admin motorola Admin  
Motorola SURFboard SBV5120 HTTP admin motorola Admin  
mro
software
maximo v4.1 Multi SYSADM sysadm Admin  
Mutare EVM Admin All HTTP (none) admin Admin http://www.mutare.com/data/kb/
NAI Intrushield IPS 1200/2600/4000 SSH + Web admin admin123 Admin By Nicolas Gregoire
NAI Entercept   Management console GlobalAdmin GlobalAdmin Admin By Nicolas Gregoire : must
NEC WARPSTAR-BaseStation   Telnet n/a (none) Admin  
Netcomm NB1300   HTTP admin password Admin  
Netgea FR314   HTTP admin password Admin  
NetGear RM356 None Telnet (none) 1234 Admin shutdown the router via
internet
Netgear MR-314 3.26 HTTP admin 1234 Admin  
Netgear RT314   HTTP admin admin Admin  
Netgear RP614   HTTP admin password Admin  
Netgear RP114 3.26 Telnet (none) 1234 Admin telnet 192.168.0.1
Netgear WG602 Firmware Version HTTP super 5777364 Admin  
Netgear WG602 Firmware Version HTTP superman 21241036 Admin  
Netgear WG602 Firmware Version HTTP super 5777364 Admin  
Netgear MR814   HTTP admin password Admin  
Netgear FVS318   HTTP admin password Admin  
Netgear DM602   FTP Telnet and HTTP admin password Admin  
netgear FM114P   Multi n/a (none) Admin  
NetGear WGT624 2 HTTP admin password Admin  
Netgear FR114P   HTTP admin password Admin  
Netgear ME102   SNMP (none) private Admin Standard IP-Address is
Netgear WGR614 v4 Multi admin password Admin 192.168.0.1 OR
Netgear RP114 3.20-3.26 HTTP admin 1234 Admin default http://192.168.0.1
Netgear dg834g   HTTP admin password Admin it should be work also with
dg834gt
Netgear Router/Modem   Multi admin password Admin  
Netgear MR314   Multi admin 1234 Admin  
Netgear GSM7224   HTTP admin (none) Admin  
Netgear ADSL Modem DG632 V3.3.0a_cx HTTP admin password Admin  
Netgear WGT634U   HTTP admin password Admin  
Netgear FWG114P   Multi n/a admin password  
Netgear GS724t V1.0.1_1104 HTTP n/a password Admin  
NetGear Comcast Comcast-supplied HTTP comcast 1234 diagnostics page 192.168.0.1/docsisdevicestatus.html
Netgear WG602 1.7.x HTTP admin password Admin Default IP: DHCP or
Netgear CG814CCR 2 Multi cusadmin highspeed Admin Comcast small business
router.
netgear sc101   management admin password Admin  
netgear DG834GT 192.168.0.1 Multi admin Password Admin  
Netgear FVS114 GR HTTP admin password Admin  
Netgear RO318   Multi admin 1234 Admin  
Netgear WGT624   Serial console Gearguy Geardog Admin see http://wiki.openwrt.org/
Netgear Wifi Router WGT 624 v3 HTTP admin password Admin slawcio26
netgear dg834   Multi n/a admin Admin  
Netgear FSM7326P 24+2 L3 mANAGED   HTTP admin (none) Admin  
Netgear WGR614 v6 HTTP admin draadloos Admin Dutch routers
Netgear MR814 v1 HTTP admin password Admin  
Netgear ReadyNas Duo RND2000   admin netgear1 Admin v4 firmware onwards
Netgear ReadyNas Duo RND2000   admin infrant1 Admin Upto v3 firmware
Netgear WGR614 9   admin password Admin 192.168.1.1
NETGEAR DG834G 3   admin password    
NetGenesis NetAnalysis Web Reporting   HTTP naadmin naadmin Admin  
Netopia Netopia 9500   Telnet netopia netopia Admin  
Netopia R910   Multi admin (none) Admin  
Netopia 3351   Multi n/a (none) Admin  
Netopia 4542   Multi admin noway Admin  
Netopia Netopia 7100     (none) (none)    
Netopia Netopia 9500     netopia netopia    
Netport Express 10/100   multi setup setup Admin  
Netscreen Firewall   multi netscreen netscreen Admin  
netscreen firewall   Telnet Administrator (none) Admin  
netscreen firewall   Telnet admin (none) Admin  
netscreen firewall   Telnet operator (none) Admin  
netscreen firewall   HTTP Administrator (none) Admin  
Netstar Netpilot   Multi admin password Admin http://www.netpilot.com/products/
Network
Appliance
NetCache any Multi admin NetCache Admin  
Network
Associates
WebShield Security   HTTP e500 e500changeme Admin  
Network
Associates
WebShield Security   HTTP e250 e250changeme Admin  
Network
Everywhere
NWR11B   HTTP (none) admin Admin  
Networks              
Networks              
NGSec NGSecureWeb   HTTP admin (none) Admin  
NGSec NGSecureWeb   HTTP admin asd Admin  
Niksun NetDetector   Multi vcr NetVCR Admin su after login with empty
password
Nimble PC BIOS   Console n/a xdfk9874t3 Admin  
Nimble BIOS   Console n/a xdfk9874t3 Admin  
Nokia DSL Router M1122 1.1 – 1.2 Multi m1122 m1122 User  
Nokia MW1122   Multi telecom telecom Admin Only in New Zealand.
NOKIA 7360   Multi (none) 9999 Admin  
Nokia M1921   Telnet (none) nokai Admin  
Nokia ADSL router M1921   Telnet (none) nokia Admin  
Nokia M1122 unknown Multi (none) Telecom Admin New Zealand
NOMADIX AG5000   Telnet admin (none) Admin  
Nortel Meridian Link   Multi disttech 4tas engineer account  
Nortel Meridian Link   Multi maint maint Maintenance account  
Nortel Meridian Link   Multi mlusr mlusr user account  
Nortel Remote Office 9150   Client admin root Admin  
Nortel Accelar (Passport) 1000   Multi l2 l2 Layer 2 Read Write  
Nortel Accelar (Passport) 1000   Multi l3 l3 Layer 3 (and layer 2)  
Nortel Accelar (Passport) 1000   Multi ro ro Read Only  
Nortel Accelar (Passport) 1000   Multi rw rw Read Write  
Nortel Accelar (Passport) 1000   Multi rwa rwa Read Write All  
Nortel Extranet Switches   Multi admin setup Admin  
Nortel Baystack 350-24T   Telnet n/a secure Admin  
Nortel Meridian PBX   Serial login 0   AUTH codes in LD 8
Nortel Meridian PBX   Serial login 1111   AUTH codes in LD 8
Nortel Meridian PBX   Serial login 8429   AUTH codes in LD 8
Nortel Meridian PBX   Serial spcl 0   AUTH codes in LD 8
Nortel Meridian MAX   Multi service smile general engineer account  
Nortel Meridian MAX   Multi root 3ep5w2u Admin  
Nortel Matra 6501 PBX   Console (none) 0 Admin  
Nortel Meridian MAX   Multi maint ntacdmax Maintenance account  
Nortel Meridian CCR   Multi service smile general engineer account  
Nortel Meridian CCR   Multi disttech 4tas engineer account enter 3letter of day from
Nortel Meridian CCR   Multi maint maint Maintenance account  
Nortel Meridian CCR   Multi ccrusr ccrusr User account  
Nortel Meridian   Multi n/a (none) Admin  
Nortel Meridian Link   Multi service smile general engineer account  
Nortel Contivity Extranet/VPN switches HTTP admin setup Admin  
nortel dms   Multi n/a (none) Admin  
Nortel Business Communications
Manager
3.5 and 3.6 HTTPS supervisor PlsChgMe Admin there is an exclamation
point
Nortel Phone System All From Phone n/a 266344 Installers  
Nortel Norstar   Console 266344 266344 Admin  
nortel p8600   Multi n/a (none) Admin  
Nortel VPN Gateway   Console admin admin Admin  
Nortel Passport 2430   Telnet Manager (none) Admin  
NRG
or RICOH
DSc338 Printer 1.19 HTTP (none) password Admin no user
Nullsoft Shoutcast 38361 PLS admin changeme Admin  
OKI C5700   HTTP root the 6 last digit of the Admin running with other models
OKI 6120e and 421n   HTTP admin OkiLAN Admin  
olitec sx 200 adsl modem router   Multi admin adslolitec Admin default ip 192.168.0.250
olitec
(Trendchip)
sx 202 adsl modem router   HTTP admin admin Admin Firmware: 2.7.0.9
Omnitronix Data-Link DL150 Multi (none) SUPER Admin  
Omnitronix Data-Link DL150 Multi (none) SMDR Admin  
OMRON MR104FH   Multi n/a (none) Admin  
OPEN
Networks
812L   HTTP root 0P3N Admin  
OpenConnect OC://WebConnect Pro   Multi admin OCS Admin  
OpenConnect OC://WebConnect Pro   Multi adminstat OCS Admin  
OpenConnect OC://WebConnect Pro   Multi adminview OCS Admin  
OpenConnect OC://WebConnect Pro   Multi adminuser OCS Admin  
OpenConnect OC://WebConnect Pro   Multi adminview OCS Admin  
OpenConnect OC://WebConnect Pro   Multi helpdesk OCS Admin  
Openwave WAP Gateway Any HTTP sys uplink Admin  
Openwave MSP Any HTTP cac_admin cacadmin Admin  
Oracle Oracle RDBMS Any Multi system/manager sys/change_on_install Admin  
Osicom NETPrint 500 1000 1500 and Telnet Manager Manager Admin  
Osicom NETPrint and JETX Print 500 1000 1500 and Telnet sysadm sysadm Admin  
Osicom Osicom Plus T1/PLUS 56k   Telnet write private    
Osicom NETCommuter Telnet debug d.e.b.u.g User   No
Osicom NETCommuter Telnet echo echo User   No
Osicom NETCommuter Telnet guest guest User   No
Osicom NETCommuter Telnet Manager Manager Admin   No
Osicom NETCommuter Telnet sysadm sysadm Admin   No
Osicom Osicom Plus T1/PLUS 56k     write private    
Osicom NETCommuter Remote   Telnet sysadm sysadm Admin  
Osicom JETXPrint 1000E/B Telnet sysadm sysadm Admin  
Osicom JETXPrint 1000E/N Telnet sysadm sysadm Admin  
Osicom JETXPrint 1000T/N Telnet sysadm sysadm Admin  
Osicom JETXPrint 500 E/B Telnet sysadm sysadm Admin  
Osicom NETPrint 500 1000 1500 and 2000 Series Telnet Manager
Overland NEO Series Libraries   Multi Factory 56789 Admin Factory password under
Utilities.
ovislink WL-1120AP   Multi root (none) Admin  
Pacific
Micro Data
MAST 9500 Universal Disk
Array
ESM ver. 2.11 / 1 Console pmd (none) Admin  
Panasonic CF-28   Multi n/a (none) Admin  
panasonic cf 27 4 Multi n/a (none) Admin  
Panasonic CF-45   Multi n/a (none) Admin  
Panasonic PBX TDA 100/200/400 all Console (none) 1234 Admin google.com search q
panasonic
Pansonic KXTD1232   Multi admin 1234 Admin  
penril
datability
vcp300 terminal server   Multi n/a system Admin  
Pentagram Cerberus ADSL modem + router   HTTP admin password Admin  
Pentaoffice Sat Router   Telnet (none) pento Admin  
PentaSafe VigilEnt Security Manager 3 VigilEnt Security PSEAdmin $secure$ Admin  
Perle CS9000 any Console admin superuser Admin  
pfSense pfSense Firewall 1.0.1 Multi admin pfsense Admin http://www.pfsense.com
Phoenix
v1.14
Phoenix v1.14   Multi Administrator admin Admin  
Pirelli Pirelli Router   Multi admin mu Admin  
Pirelli Pirelli Router   Multi admin microbusiness Admin  
Pirelli Pirelli Router   Multi user password Admin  
Pirelli Pirelli AGE-SB   HTTP admin smallbusiness Admin  
Pirelli AGE ADSL Router   Multi admin microbusiness Admin  
Pirelli AGE ADSL Router   Multi user password User  
Pirelli DRG A125G 4.5.3   admin admin Admin  
Planet WAP-1900/1950/2000 36561 Multi (none) default Admin  
planet Akcess Point   HTTP admin admin Admin  
Planet ADE-4110   HTTP admin epicrouter Admin  
Planet XRT-401D   HTTP admin 1234 Admin  
Planet ADE-4000   Multi admin epicrouter Admin  
planet akcess point   HTTP admin admin Admin  
Planet WAP 4000   Multi admin admin Admin Default IP is 192.168.1.1
Planex BRL-04UR   Multi admin 0 Admin  
Polycom Soundpoint VoIP phones   HTTP Polycom SpIp User  
Polycom ViewStation 4000 3.5 Multi (none) admin Admin  
Polycom iPower 9000   Multi (none) (none) Admin  
Polycom SoundPoint IP Phones   HTTP Polycom 456 Admin username is case sensitive
Prestigio Nobile 156 Multi n/a (none) Admin  
Prolink H9000 Series   HTTP admin password Admin  
Promise NS4300N NAS   Shell engmode hawk201 Admin  
Proxim Orinoco 600/2000 All HTTP (none) (none) Admin WLAN accesspoint
Psion
Teklogix
9150   HTTP support h179350 Admin  
Psionteklogix 9160 1 HTTP admin admin Admin  
Psionteklogix 9160 1 HTTP admin admin Admin  
ptcl zxdsl831cii     admin admin    
Pyramid
Computer
BenHur all HTTP admin admin Admin  
QLogic SANbox 5602 Fibre Channel
Switch
  Multi admin password Admin  
QLogic SANbox 5602 Fibre Channel
Switch
  Multi images images User  
Quintum
Technologies Inc.
Tenor Series all Multi admin admin Admin  
Radware Linkproof   ssh lp lp Admin  
Radware Linkproof 3.73.03 Multi radware radware Admin  
Radware AppXcel     radware radware Admin  
Radware AppDirect     radware radware Admin  
Raidzone raid arrays     n/a raidzone    
Ramp
Networks
WebRamp     wradmin trancell    
Ramp
Networks
WebRamp     wradmin trancell    
RedHat Redhat 6.2   HTTP piranha q User  
RedHat Redhat 6.2   HTTP piranha piranha User  
Research PC BIOS   Console n/a Col2ogro2 Admin  
Research BIOS   Console n/a Col2ogro2 Admin  
Ricoh Aficio AP3800C HTTP sysadmin password Admin  
Ricoh Aficio 2228c   Multi sysadmin password Admin Webpage admin
Ricoh Aficio AP3800C 2.17 HTTP (none) password Admin alternative to sysadmin and
Admin
Ricoh Aficio 2232C   Telnet n/a password Admin  
Ricoh AP410N 1.13 HTTP admin (none) Admin  
Ricoh Aficio 2020D   HTTP admin password Admin  
Ricoh Ricoh Aficio MP 3500 1.0 Multi admin (none) Admin Nabil OUCHN
Ricoh Aficio 551   Multi (none) sysadm Admin  
Ricoh Aficio 1018d   HTTP n/a sysadm Admin  
Ricoh Aficio 1013F   HTTP n/a sysadm Admin  
Ricoh Aficio MP 161L ( Printer MP 161L )   (none – Not required) sysadm Administration  
Ricoh Aficio 2016   (none) password all  
RM RM Connect   Multi setup changeme    
RM RM Connect   Multi teacher password    
RM RM Connect   Multi temp1 password    
RM RM Connect   Multi admin rmnetlm    
RM RM Connect   Multi admin2 changeme    
RM RM Connect   Multi adminstrator changeme    
RM RM Connect   Multi deskalt password    
RM RM Connect   Multi deskman changeme    
RM RM Connect   Multi desknorm password    
RM RM Connect   Multi deskres password    
RM RM Connect   Multi guest (none)    
RM RM Connect   Multi replicator replicator    
RM RM Connect   Multi RMUser1 password    
RM RM Connect   Multi topicalt password    
RM RM Connect   Multi topicnorm password    
RM RM Connect   Multi topicres password    
RoamAbout RoamAbout R2 Wireless   Multi admin password Admin  
SAF
Tehnika
CFQ series modems     integrator p1nacate Integrator  
SAF
Tehnika
CFQ series modems     administrator d1scovery Admin  
SAF
Tehnika
CFQ series modems     operator col1ma Operator  
SAF
Tehnika
CFQ series modems     monitor monitor Monitor  
sagem fast 1400w   Multi root 1234 Admin  
SAGEM FAST 1400   Multi admin epicrouter Admin  
Sagem F@st 1200 (Fast 1200)   Telnet root 1234 User root/1234
Sagem Livebox   Multi admin admin Admin  
Sagem Fast 3504 v2     Menara Menara admin moroccan internet provider’s
router
samsung n620   Multi n/a (none) Admin  
Samsung MagicLAN SWL-3500RG 2.15 HTTP public public Admin def. WEP keys: 0123456789
samsung modem/router aht-e300 Multi admin password Admin after reset
Scientific
Atlanta
DPX2100 Comcast-supplied HTTP admin w2402 diagnostics page 192.168.100.1
Secure
Computing
Webwasher all HTTP admin (none) Admin  
Sempre 54M Wireless Router V 1.00   admin admin    
Senao 2611CB3+D (802.11b   HTTP admin (none) Admin Default IP: 192.168.1.1
seninleyimben @skan el rattani FTP admin admin Admin 11182360608
Sercom IP806GA   HTTP admin admin Admin  
Sercom IP806GB   HTTP admin admin Admin  
Server
Technology
Sentry Remote Power   Multi GEN1 gen1 view/control Telnet port 2001
Server
Technology
Sentry Remote Power   Multi GEN2 gen2 view/control Telnet port 2001
Server
Technology
Sentry Remote Power   Multi ADMN admn Admin Telnet port 2001
sharp AR-407/S402   Multi n/a (none) Admin  
Sharp AR-M355N   HTTP admin Sharp Admin  
Sharp MX-3501n   HTTP Administrator admin Admin  
Sharp AL-1655CS   HTTP admin Sharp Admin  
Sharp AR-M155   HTTP admin Sharp Admin Note the Capital S
Sharp MX-5500   HTTP admin admin Admin Different to other sharp
units
Sharp AR-M237     admin Sharp Admin  
Sharp AR-M237     admin Sharp Admin pass case-sensitive
Shoretel ALL   HTTP admin changeme Admin  
siemen speedstream 5400 059-e440-a02 HTTP admin (none) Admin  
Siemens ROLM PBX     eng engineer    
Siemens ROLM PBX     op op    
Siemens ROLM PBX     op operator    
siemens hipath   Multi n/a (none) Admin  
Siemens ROLM PBX     su super    
Siemens PhoneMail     poll tech    
Siemens PhoneMail     sysadmin sysadmin    
Siemens ROLM PBX     admin pwp    
Siemens PhoneMail     tech tech    
SIEMENS SE515   HTTP admin n/a Admin  
Siemens 5940 T1E1 Router 5940-001 v6.0.180-2 Telnet superuser admin Admin  
Siemens PhoneMail     poll tech    
Siemens PhoneMail     sysadmin sysadmin    
Siemens PhoneMail     tech tech    
Siemens ROLM PBX     admin pwp    
Siemens ROLM PBX     eng engineer    
Siemens ROLM PBX     op op    
Siemens ROLM PBX     op operator    
Siemens ROLM PBX     su super    
Siemens SpeedStream 4100   HTTP admin hagpolm1 Admin DSL Modem and Router
Siemens SE560dsl   Multi admin admin Admin Also has an account with:
Siemens Speedstream SS2614 Hardware V. 01 HTTP n/a admin Admin  
Siemens Hipath 3300-3750 Custom program 31994 31994 Admin  
Siemens Gigaset All Multi (none) 0 Admin  
Siemens
Nixdorf
PC BIOS   Console n/a SKY_FOX Admin  
Siemens
Nixdorf
BIOS   Console n/a SKY_FOX Admin  
Siemens
Pro C5
Siemens   Multi n/a (none) Admin  
Sigma Sigmacoma IPshare Sigmacom router v1.0 HTTP admin admin Admin effes2004@gmail.com
Signamax 065-7726S   Multi admin admin Admin Switch
Siips Trojan 8974202 Multi Administrator ganteng Admin Thx
silex
technology
PRICOM (Printserver)   Multi root (none) Admin for telnet / HTTP
Silvercrest WR-6640Sg   HTTP admin admin Admin  
sitara qosworks   Console root (none) Admin  
Sitecom All WiFi routers   Multi (none) sitecom Admin  
Sitecom WL-0xx up to WL-17x all Multi admin admin Admin often on port 88
SmartSwitch Router 250 ssr2500 v3.0.9 Multi admin (none) Admin  
SMC Barricade 7004 AWBR   Multi admin (none) Admin 192.168.123.254 (WiFi AP)
SMC Router All HTTP admin admin Admin  
SMC SMC broadband router   HTTP admin admin Admin  
SMC SMC2804WBR v.1 HTTP (none) smcadmin Admin  
SMC WiFi Router All HTTP n/a smcadmin Admin model #2804WBRP-G
SMC SMB2804WBR V2 Multi Administrator smcadmin Admin  
SMC 7401BRA 1 HTTP admin barricade Admin  
SMC 7401BRA 2 HTTP smc smcadmin Admin  
SMC Barricade7204BRB   HTTP admin smcadmin Admin  
SMC 2804wr   HTTP (none) smcadmin Admin  
SMC Router/Modem BR7401 Multi admin barricade Admin  
SMC SMCWBR14-G SMCWBR14-G HTTP (none) smcadmin Admin  
SMC Modem/Router   HTTP cusadmin highspeed Customer Admin Comcast Commercial High
Speed Modem model number 8013WG
SMC 7204BRA   Multi smc smcadmin Admin  
SMC SMCWBR14-G   HTTP n/a smcadmin Admin mentioned password (no
passwd)
smc smc 7904BRA   Multi (none) smcadmin Admin  
SMC smc7904wbrb   Multi (none) smcadmin Admin  
SMC SMC7004VBR   HTTP n/a smcadmin Admin  
SMC SMCWBR14-G   HTTP (none) smcadmin Admin DeFaults:IP Address:
192.168.2.1
SMC SMC8013WG-CCR 2.11.19-1d HTTP mso w0rkplac3rul3s Admin Comcast Business Gateway w
Snapgear Pro Lite and SOHO 1.79 Multi root default
Software             EVMAdminGuide.pdf
Solution
6
Viztopia Accounts   Multi aaa often blank Admin  
SonicWALL ALL ALL HTTP admin password Admin  
Sonic-X SonicAnime on Telnet root admin Admin 1.01E+14
SOPHIA
(Schweiz)
Protector   HTTPS admin Protector Admin  
SOPHIA
(Schweiz)
Protector   SSH root root Admin  
Sorenson SR-200   HTTP (none) admin Admin  
Sparklan Wx-6215 D and G   HTTP admin admin Admin  
Spectra
Logic
64000 Gator   Multi administrator (none) Admin Has no password
Spectra
Logic
64000 Gator   Multi operator (none) User Has no password
Speedstream 5861 SMT Router   Multi admin admin Admin  
Speedstream 5871 IDSL Router   Multi admin admin Admin  
Speedstream Router 250 ssr250   Multi admin admin Admin  
Speedstream DSL   Multi admin admin Admin  
Speedstream 5667 R4.0.1 HTTP (none) admin Admin  
SpeedStream 5660   Telnet n/a adminttd Admin  
SpeedStream SpeedStream   Telnet Administrator admin Admin  
SpeedXess HASE-120   Multi (none) speedxess Admin  
Sphairon (Versatel WLAN-Router)   Multi admin passwort Admin  
Spike CPE   Console enable (none) Admin  
SSA BPCS Up to 5.02 Multi SSA SSA Admin rarely changed/used for
stratacom all all Multi stratacom stratauser Admin  
Sun JavaWebServer 1.x 2.x AdminSrv admin admin Admin  
Sun Cobalt   HTTP admin admin Admin submit by Nabil Ouchn
Sun
Microsystems
ILOM of X4100 1 HTTP root changeme Admin  
SWEEX       sweex mysweex Admin  
Swissvoice IP 10S   Telnet target password Admin  
Syabas
Technology
Popcorn Hour A-110 all   nmt 1234 admin  
Syabas
Technology
Popcorn Hour C-200 all   nmt 1234 admin  
Syabas
Technology
Popcorn Hour A-110 all   ftpuser 1234 admin  
Sybase EAServer   HTTP jagadmin (none) Admin Source : Manufactor
documentation
Symbol Spectrum series 4100-4121 HTTP n/a Symbol Admin Access Point Wireless
Symbol AP-2412   Multi n/a Symbol Admin 2Mbps FH AccessPoint
Symbol AP-3020   Multi n/a Symbol Admin 2Mbps FH AccessPoint
Symbol AP-4111   Multi n/a Symbol Admin 11Mbps DS AccessPoint
Symbol AP-4121   Multi n/a Symbol Admin 11Mbps DS AccessPoint
Symbol AP-4131   Multi n/a Symbol Admin 11Mbps DS AccessPoint
Symbol CB3000 A1 HTTPS admin symbol Admin Default IP 10.10.1.1
Symmetricom NTS-200 All   operator mercury Admin Symmetricom NTP Network
Symmetricom NTS-200 All   guest truetime guest Symmetricom NTP Network
SysMaster M10   HTTP admin 12345 Admin  
System/32 VOS   Multi install secret Admin  
T com sinus 1054dsl   veda 12871    
TANDBERG TANDBERG 8000 Multi (none) TANDBERG Admin http://www.tandberg.net/
Tandberg 6000MXP   Multi Admin (none) Admin  
Tandberg
Data
DLT8000 Autoloader 10x   Console n/a 10023 Maintenance  
Tandem TACL   Multi super.super (none) Admin  
Tandem TACL   Multi super.super master Admin  
T-Com Speedport Router Family all HTTP (none) 0 Admin works with nearly all
routers of
T-Com Speedport any   n/a 0 admin 192.168.2.1 |
T-Com Speedport W701V any   n/a 0 admin  
T-Com Speedport W900V any   n/a 0 admin  
T-Com Speedport 503V any     123456    
T-Comfort Routers   HTTP Administrator (none) Admin  
Team
Xodus
XeniumOS 2.3 FTP xbox xbox Admin  
Technologies              
Teklogix Accesspoint   Multi Administrator (none) Admin  
Telco
Systems
Edge Link 100   Console telco telco telco  
telecom home hauwei   Multi operator (none) Admin  
Teledat Routers   HTTP admin 1234 Admin  
Teletronics WL-CPE-Router 37320 HTTPS admin 1234 Admin  
Telewell TW-EA200   Multi admin password Admin  
Telewell TW-EA501 v1 Multi admin admin Admin  
Telindus 1124   HTTP n/a (none) Admin  
Telindus SHDSL1421 yes HTTP admin admin Admin  
telindus telindus 2002 Telnet admin admin Admin  
Tellabs Titan 5500 FP 6.x Multi tellabs tellabs#1 Admin  
Tellabs 7120   Multi root admin_1 Admin telnet on port 3083
Terayon Unknown Comcast-supplied HTTP (none) (none) diagnostics page 192.168.100.1/diagnosti
Terayon Unknown Comcast-supplied HTTP (none) (none) diagnostics page 192.168.100.1/diagnosti
Thomson Wireless Cable Gateway DCW725 HTTP (none) admin Admin SSID : THOMSON (Credit to
Thomson SpeedTouch AP 180 HTTP n/a admin Admin SSID : SpeedTouch180
Thomson TCW-710   Multi (none) admin Admin ono
thomson speedtouch 585 v7 2+   admin password administrator uw club supply u wid dese
boxes
Tiara 1400 3.x Console tiara tiaranet Admin also known as Tasman
Networks
Topcom Wireless Webr@cer 1154+ V 4.00.0 HTTP admin admin Admin G+ mode (125Mbps)
integration
Topcom Wireless Webr@cer 1154+ V 0.01.06 HTTP admin admin Admin WPA-PSK implemented
Topcom Wireless Webr@cer 1154+ V 0.01.09 HTTP admin admin Admin Improved wireless stability
Topcom Skyr@cer Pro AP 554 1.93 HTTP admin admin Admin Wireless Access Point
topsec firewall   Multi superman talent Admin  
Toshiba E-Studio 3511c   HTTP Admin 123456 Admin Multifunction
Printer/Copier/
Toshiba E-Studio 4511c   HTTP admin 123456 Admin  
Toshiba Most e-Studio copiers     admin 123456 Admin  
TrendMicro InterScan 7.0   HTTP admin imss7.0 Admin  
TrendNET TEW-435BRM 1 HTTP admin password Admin  
Troy ExtendNet 100zx   Multi admin extendnet Admin dizphunKt
TVT
System
Expresse G5   Multi craft (none) Admin  
TVT
System
Expresse G5 DS1 Module   Multi (none) enter Admin  
U.S.
Robotics
SureConnect 9003 ADSL   Multi root 12345 Admin  
U.S.
Robotics
SureConnect 9105 ADSL   HTTP admin admin Admin  
UNEX Routers   HTTP n/a password Admin  
Unisys ClearPath MCP   Multi NAU NAU Privileged Network Administration
Utility
Unisys ClearPath MCP   Multi ADMINISTRATOR ADMINISTRATOR Admin  
Unisys ClearPath MCP   Multi HTTP HTTP Web Server Administration  
us
robotic
adsl gateway wireless router   wireless router support support super user access I find it on a manual
US
Robotics
USR8000 1.23 / 1.25 Multi root admin Admin DSL-Router. Web-Login always
US
Robotics
USR8550 3.0.5 Multi Any 12345 Any Best Modem
US
ROBOTICS
ADSL Ethernet Modem   HTTP (none) 12345 Admin  
US
Robotics
SureConnect ADSL SureConnect ADSL Telnet support support User works after 3rd login trial
US
Robotics
USR9110   HTTP admin (none) Admin default IP subnet:
192.168.1.0
US
Robotics
USR9106   HTTP admin admin Admin  
US
Robotics
USR5462   HTTP n/a admin Admin  
us21100060 hp omibook 6100   Multi n/a (none) Admin  
Various DD-WRT v23 SP1 Final HTTP root admin Admin Alternative firmware
VASCO VACMAN Middleware 2.x Multi admin (none) Admin strong authentication server
Verifone Verifone Junior 2.05   (none) 166816    
Verilink NE6100-4 NetEngine IAD 3.4.8 Telnet (none) (none) Guest  
Visual
Networks
Visual Uptime T1 CSU/DSU 1 Console admin visual Admin  
VxWorks misc   Multi admin admin Admin  
VxWorks misc   Multi guest guest Guest  
Wanadoo Livebox   Multi admin admin Admin  
Wang Wang   Multi CSG SESAME Admin  
Watch
guard
firebox 1000   Multi admin (none) Admin  
Watchguard SOHO and SOHO6 all versions FTP user pass Admin works only from the inside
LAN
Watchguard Firebox     (blank) wg admin  
Weidmüeller IE-SW16-M     admin detmond admin  
westell 2200   Multi admin password Admin  
Westell Versalink 327   Multi admin (none) Admin  
Westell Wirespeed   Multi admin password Admin also try password: sysAdmin
Westell Wang   Multi CSG SESAME Admin  
Westell Wirespeed wireless router   Multi admin sysAdmin Admin  
Westell Ultraline Series3 A90- 1.02.00.04   admin password1 Admin Verizon cable router (Model
WLAN_3D Router   HTTP Administrator admin Admin  
wline w3000g   HTTP admin 1234 Admin  
Wyse Winterm 5440XL Console root wyse Admin  
Wyse Winterm 5440XL VNC VNC winterm VNC  
Wyse Winterm 9455XL BIOS (none) Fireport BIOS Case Sensitive
Wyse winterm   Multi root (none) Admin  
Wyse rapport 4.4 FTP rapport r@p8p0r+ ftp logon to  
Wyse Winterm 3150   VNC n/a password Admin by satadru
XAMPP XAMPP Filezilla FTP Server     newuser wampp User  
Xavi 7000-ABA-ST1   Console n/a (none) Admin  
Xavi 7001   Console n/a (none) Admin  
xd xdd xddd Multi xd xd Admin  
Xerox Multi Function Equipment   Multi admin 2222 Admin combo fax/scanner/printer
Xerox WorkCenter Pro 428   HTTP admin admin Admin  
xerox xerox   Multi admin admin Admin  
xerox xerox   Multi n/a admin Admin  
Xerox Document Centre 425   HTTP admin (none) Admin  
xerox work centre pro 35   HTTP admin 1111 Admin  
Xerox DocuCentre 425   HTTP admin 22222 Admin works for access panel 2
Xerox Document Centre 405 HTTP admin admin Admin  
Xerox 240a   HTTP admin x-admin Admin  
Xerox WorkCentre 7132   Multi 11111 x-admin Admin  
Xerox 6204   Multi n/a 0 Admin  
Xerox DocumentCenter 186 2007   admin x-admin admin  
X-Micro X-Micro WLAN 11b Broadband
Router
1.2.2 1.2.2.3 1.2.2.4
1.6.0.0
Multi super super Admin From BUGTRAQ
X-Micro X-Micro WLAN 11b Broadband
Router
1.6.0.1 HTTP 1502 1502 Admin From BUGTRAQ
X-Micro WLAN 11b Access Point 37258 Multi super super Admin http://secunia.com/advisories/
Xylan Omniswitch   Telnet admin switch Admin  
Xylan Omniswitch   Telnet diag switch Admin  
Xylan omniswitch   Multi admin switch Admin  
Xyplex Routers   Port 7000 n/a system Admin  
Xyplex Terminal Server   Port 7000 n/a access User  
Xyplex Terminal Server   Port 7000 n/a system Admin  
Xyplex Routers   Port 7000 n/a access User  
xyplex switch 3.2 Console n/a (none) Admin  
Xyplex Routers   Port 7000 n/a access User  
Xyplex Terminal Server   Port 7000 n/a access User  
Xyplex Terminal Server   Port 7000 n/a system Admin  
Yakumo Routers   HTTP admin admin Admin  
Zcom Wireless   SNMP root admin Admin  
Zebra 10/100 Print Server   Multi admin 1234 Admin  
ZOOM ZOOM ADSL Modem   Console admin zoomadsl Admin  
ZTE ZXDSL 831 4.2 Multi ADSL expert03 Admin Default Password if user
does
ZyXEL Prestige   HTTP n/a 1234 Admin http://192.168.1.1
ZyXEL Prestige   FTP root 1234 Admin  
ZyXEL Prestige   Telnet (none) 1234 Admin  
ZyXEL Prestige 643   Console (none) 1234 Admin  
ZyXEL Prestige 652HW-31 ADSL Router   HTTP admin 1234 Admin http://192.168.1.1
ZyXEL Prestige 100IH   Console n/a 1234 Admin  
Zyxel ZyWall 2   HTTP n/a (none) Admin  
Zyxel adsl routers All ZyNOS Firmwares Multi admin 1234 Admin this is default for dsl
routers
ZyXEL Prestige 650   Multi 1234 1234 Admin  
ZyXEL Prestige 900   HTTP webadmin 1234 Admin 192.168.1.1:8080
ZyXEL Prestige 645   HTTP admin 1234 Admin  
Zyxel Prestige 660HW   Multi admin admin Admin  
ZyXel Prestige P660HW   Multi admin 1234 Admin  
Zyxel Router 650-1 Telnet (none) 1234 Admin Telefonica
ZyXeL 660HW   HTTP admin (none) Admin terra
Zyxel ES-2108   Multi admin 1234 Admin  
zyxel g-570s   Multi n/a admin Admin  
Zyxel Prestige 650HW31 31 Telnet 192.168.1.1 60020 @dsl_xilno Admin  
Zyxel NWA1100       1234 Admin  
Zyxel G570S v2     1234 Admin  
ZyXel
Based (Generic)
Broadband SOHO Router 925ahcd on circuit   admin 0 Admin Password is 4 zeros. Gray
router
ZyXEL
ZyWALL Series
Prestige 660R-61C   Multi n/a admin Admin         

Cielo e terra (duet with Dante Thomas)