Vulnerability Development mailing list archives

Re: default passwords...partII


From: count () CYBERPHUNKS NET (CouNT)
Date: Thu, 6 Jul 2000 23:02:26 +0200


If you guys send me all the info we've all gathered so far, I'll take the
time to put it into a database and so on, with categories for routers /
switches / pbx / bios and so on at www.nullsession.com which is currently
under construction, but I could put it up before the front end is ready, so
we all could benefit from it.

Joachim Nasslander aka CouNT

NT / Exchange / ISS / Security / Linux
Planet X Systems AB
http://www.pxs.se

Private Project - M$ Security / how-to / faq - Linux how-to / newbie-guide -
under construction
http://www.nullsession.com

-----Original Message-----
From: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]On Behalf Of
Daniel SALAGEAN
Sent: den 5 juli 2000 03:59
To: VULN-DEV () SECURITYFOCUS COM
Subject: Re: default passwords...partII

On Wed, 5 Jul 2000, Roelof Temmingh wrote:

All,

Thanks again for all the replies - I have tried to put everything on
there, and
give credit where needed:

http://wips.sensepost.com/defaultpasswords.html

Some things - my idea with the list was not to include default Unix/VMS/MS
usernames and passwords - I have seen some of those around, and I have no
need
to replicate it. My idea was also not to include BIOS passwords for the
same
reason.

The list is furthermore not a complete list - some of the passwords need
console access and some need special ports. I have included some of this
information - but heck - you can figure out yourselves (port scans etc).
If
someone wants to redo the list with SNMP community names, special notes,
etc.
etc. I am sure it will be appreciated. I publish my list and will try to
keep
it up to date. The idea is not to make the list my own but rather to get
the
ppl on here to help me/someone to build the list - to get the damn list
mirrored on a few sites so that search thingies pick them up.

Maybe someone with some time on hands will register
www.defaultpasswords.com:)
, and add BIOS/Unix/VMS/MS/CMP/Oracle/SQL/IIS/etc/etc defaults to it with
a
nice front end - that would be great.. I just want it to exists. Joe
Jenkins
has a nice page for this: http://www.nerdnet.com/security/index.php. Maybe
we
can get this replicated somewhere?

OK..I registered that domain, it will be up in 24h. I can give some space
for hosting, but I need the page to post it, 'cause I don't have really
that much time :) So, who wanna do it, please email it to me.

Domain Names Registered:
defaultpasswords.com
defaultpasswords.net

Best regards,

                      L i n u x   S e c u r i t y   S y s t e m s
                                    Daniel SALAGEAN
                                 Romania Division CEO
                      tel: +40 (93) 412-832    email: danys () lss ro


Current thread: