mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 11:35:51 +00:00
Restructure repository: Remove OWASP categorization, organize by vulnerability type
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
@@ -0,0 +1,17 @@
|
||||
# Weak Passwords
|
||||
|
||||
## Description
|
||||
Weak password vulnerabilities occur when systems allow or use passwords that are easily guessable or commonly used. This includes default passwords, dictionary words, and simple patterns that can be easily compromised through brute force or dictionary attacks.
|
||||
|
||||
## Common Attack Vectors
|
||||
- Login forms
|
||||
- Account creation
|
||||
- Password reset
|
||||
- Administrative interfaces
|
||||
- Default credentials on devices/services
|
||||
|
||||
## Testing Approach
|
||||
Test systems with common weak passwords, default credentials, and dictionary words to identify weak password policies or default configurations.
|
||||
|
||||
## Payloads
|
||||
See `weak-passwords-payloads.txt` for a comprehensive list of common weak passwords and default credentials.
|
||||
@@ -0,0 +1,47 @@
|
||||
# Weak Password List
|
||||
|
||||
# Common weak passwords
|
||||
password
|
||||
123456
|
||||
12345678
|
||||
qwerty
|
||||
abc123
|
||||
password123
|
||||
admin
|
||||
letmein
|
||||
welcome
|
||||
monkey
|
||||
|
||||
# Pattern-based weak passwords
|
||||
Password1
|
||||
Admin123
|
||||
Welcome1
|
||||
Qwerty123
|
||||
Abc12345
|
||||
|
||||
# Keyboard patterns
|
||||
qwerty
|
||||
asdfgh
|
||||
zxcvbn
|
||||
qwertyuiop
|
||||
asdfghjkl
|
||||
|
||||
# Number sequences
|
||||
123456
|
||||
123456789
|
||||
1234567890
|
||||
000000
|
||||
111111
|
||||
|
||||
# Company/service related
|
||||
company123
|
||||
service2023
|
||||
admin2023
|
||||
user2023
|
||||
|
||||
# Dictionary words
|
||||
dragon
|
||||
football
|
||||
baseball
|
||||
superman
|
||||
batman
|
||||
Reference in New Issue
Block a user