> ## Documentation Index
> Fetch the complete documentation index at: https://0-x.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Default Login Credentials

Before brute-forcing or cracking anything, check whether the device or application in front of you was simply never reconfigured from its factory login. Routers, IoT devices, admin panels for niche software, and management interfaces are the most common offenders, this takes seconds and is worth ruling out first on every new service found during enumeration.

```bash theme={null}
pip3 install defaultcreds-cheat-sheet
creds search linksys          # search by vendor/product name
creds search tomcat
```

> [!TIP]
>
> The underlying [CSV dataset](https://github.com/ihebski/DefaultCreds-cheat-sheet/blob/main/DefaultCreds-Cheat-Sheet.csv) is also browsable directly on GitHub when the tool itself isn't installed.

> [!NOTE]
>
> [SecLists' default-passwords directory](https://github.com/danielmiessler/SecLists/tree/master/Passwords/Default-Credentials) covers a similar list in plain wordlist form, this is also very useful when using bruteforcing tools

***

## Quick Reference Tools

> **[DefaultCreds-Cheat-Sheet](https://github.com/ihebski/DefaultCreds-cheat-sheet)**
>
> Searchable database of default credentials by vendor/product.

> **[SecLists: Default Credentials](https://github.com/danielmiessler/SecLists/tree/master/Passwords/Default-Credentials)**
>
> The same kind of data as plain wordlists, for automated spraying.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.