Add default-creds

Signed-off-by: Hadi <112569860+anotherhadi@users.noreply.github.com>
This commit is contained in:
Hadi
2026-03-07 18:00:16 +01:00
parent 018a5cd7dc
commit f2eb28b518
2 changed files with 83 additions and 0 deletions

Binary file not shown.

After

Width:  |  Height:  |  Size: 109 KiB

View File

@@ -0,0 +1,83 @@
---
title: "Default-Creds"
description: "Default Creds is a centralized, community-driven repository of factory-set credentials. Designed for pentesters and security researchers, it helps identify weak access points during engagement phases or audit internal infrastructure before they become a security liability."
image: "../../../public/images/projects/default-creds.png"
tags: ["default-password", "cybersecurity"]
demoLink: "https://default-creds.hadi.diy"
sourceLink: "https://github.com/anotherhadi/default-creds"
---
<a href="https://github.com/anotherhadi/default-creds/stargazers">
<img src="https://img.shields.io/github/stars/anotherhadi/default-creds?color=8FD0CB&labelColor=0b0b0b&style=for-the-badge&logo=starship&logoColor=8FD0CB">
</a>
<a href="https://github.com/anotherhadi/default-creds/">
<img src="https://img.shields.io/github/repo-size/anotherhadi/default-creds?color=8FD0CB&labelColor=0b0b0b&style=for-the-badge&logo=github&logoColor=8FD0CB">
</a>
<a href="https://github.com/anotherhadi/default-creds/tree/main/src/data">
<img src="https://img.shields.io/badge/dynamic/json?url=https://api.github.com/repos/anotherhadi/default-creds/contents/src/data&query=%24.length&label=Manufacturers&style=for-the-badge&color=8FD0CB&labelColor=0b0b0b&logo=github&logoColor=8FD0CB">
</a>
<a href="https://github.com/anotherhadi/default-creds/blob/main/LICENSE">
<img src="https://img.shields.io/static/v1.svg?style=for-the-badge&label=License&message=MIT&colorA=0b0b0b&colorB=8FD0CB&logo=unlicense&logoColor=8FD0CB"/>
</a>
**Default Creds** is a centralized, community-driven repository of factory-set credentials. Designed for pentesters and security researchers, it helps identify weak access points during engagement phases or audit internal infrastructure before they become a security liability.
**Live Instance:** [default-creds.hadi.diy](https://default-creds.hadi.diy)
**API Documentation:** [default-creds.hadi.diy/api-docs](https://default-creds.hadi.diy/api-docs)
## 🎯 The Mission
In the world of cybersecurity, "low-hanging fruit" often comes in the form of unchanged default passwords. Our mission is to provide a fast, reliable, and searchable database of these credentials to help security professionals secure systems before attackers exploit them.
## ⚙️ How it Works
This application is built with **Astro** and **Svelte 5** for maximum performance. It operates as a "Flat-File Database":
1. **YAML Powered:** All credentials are stored as structured `.yaml` files in the `src/data/` directory.
2. **Real-time Search:** The API parses these files on-the-fly (or via build cache) to provide instant results based on service names, versions, or tags.
3. **Developer Friendly:** A public API is available to integrate these credentials into your own automated scanning tools.
## 🤝 Community Driven & Contributing
Security is a collective effort. This project only grows as the community discovers and adds new default configurations.
- **Want to add an app?** Just create a new YAML file in `src/data/`.
- **Found a mistake?** Submit a Pull Request to update existing entries.
Before contributing, please read our [CONTRIBUTING.md](./CONTRIBUTING.md) for guidelines on how to format your YAML files.
## 💻 Local Development
### Prerequisites
- Bun (or nix, just `nix develop`)
### Installation
1. **Clone the repo:**
```bash
git clone https://github.com/anotherhadi/default-creds.git
cd default-creds
```
2. **Start the dev server:**
```bash
bun dev
```
3. **Add your data:**
Drop a `.yaml` file into `src/data/` and it will appear in the search results instantly!
### 🛠️ Tech Stack
- **Framework:** [Astro](https://astro.build/)
- **UI Logic:** [Svelte 5 (Runes)](https://svelte.dev/)
- **Styling:** [Tailwind CSS](https://tailwindcss.com/) + [DaisyUI](https://daisyui.com/)
## ⚠️ Legal Disclaimer
Usage of **Default Creds** for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.