← Back to Academy

Academy Node

Default Credentials

Testing known default credentials for discovered services and web apps.

Beginner100 XPWeb

Why it matters

Default creds are fast wins and should be checked before deep exploitation.

How to identify it

  • Product/version known
  • Default login page

Linux commands

searchsploit PRODUCT
curl -i http://TARGET/login
hydra -L users.txt -P small-passwords.txt TARGET http-post-form '/login:user=^USER^&pass=^PASS^:Invalid'

Expected output

  • Successful login
  • Known default pair

Success looks like

  • Admin panel access or service creds

Failure looks like

  • Defaults changed

Troubleshooting

  • Try admin:admin, admin:password, product defaults
  • Check version docs

Common mistakes

  • Trying huge lists
  • Locking accounts
  • Not checking docs

Alternative attacks

  • SQLi
  • Password reuse

What to try next

  • Look for upload/plugin/RCE
  • Reuse creds against SMB/WinRM

Recommended next lessons

ASREP Roast

ASREP roasting abuses AD users with Kerberos pre-authentication disabled. You can request encrypted ASREP material and attempt to crack it offline.

Kerberoast

Kerberoasting targets domain users with SPNs. You request service tickets and crack them offline.

GenericWrite

GenericWrite means you can modify certain attributes on the target AD object.

GenericAll

GenericAll is effectively full control over the target AD object.