Default Passwords#
Vendor-supplied factory credentials. The operator tries these before any brute-force pass on initial-access enumeration, because they’re cheap, silent, and a surprising share of internet-exposed appliances still ship with them in place. ICS / OT, network gear, IPMI / BMC, and printers are the highest-yield categories.
References#
Hashcat and John the Ripper for the next step after defaults fail.