Passwords

your passwords
some hints like min. 8 letters, combined with numbers etc.

default passwords
The most common default password is or the 'Enter' password. (Don't forget to try just because its seem to be too easy to be true.)

default password list
 * Website with a huge collection of default passwords for routers, AP's, switches etc. Sorted by manufactor.

where passwords should NOT be

 * 1) on a post-it sticker attached to the monitor
 * 2) in public dumpfiles of mediawikis
 * 3) on this wiki page ;)
 * 4) tattooed to your forhead
 * 5) the name of your new born child
 * 6) your mantra
 * 7) in a dictionary

what passwords u should NOT use
A common passwords list by Openwall Project public domain

This is a list of over 3000 passwords most commonly seen on a set of Unix systems in mid-1990s, sorted for decreasing number of occurrences (that is, more common passwords are listed first).

FTP archives:
derived exclusively from the ox.ac.uk archive above, but files uncompressed includes the ox.ac.uk archive and more
 * ftp://ftp.openwall.com/pub/wordlists/ (and its mirrors)
 * ftp://ftp.ox.ac.uk/pub/wordlists/
 * ftp://ftp.zedz.net/pub/crypto/wordlists/
 * ftp://ftp.cerias.purdue.edu/pub/dict/

Examples: Good Passwords
something like

susi peter 123456 qwertz/qwerty asdfg letmein admin root irule owned

or

(very good one) g33k

Mediawiki
UPDATE user SET user_password = MD5(CONCAT(user_id, '-',MD5('somepass'))) WHERE user_name = 'whatever';

bash script
put this into a file resetpass.sh read -p "Which username to you want to reset? " username read -p "Enter new password: " password
 * 1) !/bin/bash
 * 2) mediawiki - reset a user password

mysql -u root -p wikidb -e "UPDATE user SET user_password = MD5(CONCAT(user_id, '-',MD5('$password'))) WHERE user_name = '$username';" if $? -eq 0 then echo "Ok. Updated password of '$username' to '$password'." exit 0 else echo "Error. Could not reset password." exit 1 fi

> chmod +x resetpass.sh

>./resetpass.sh

MySQL
MySQL

Windows
Microsoft: How to log on to Windows XP if you forget your password

Linux
Wenn du von einem anderen Medium bootest und auf einem System mit aktivierten Shadow Passwörtern die /etc/shadow bearbeitest und dort das verschlüsselte Passwort schlicht entfernst,also das (nur) das Passwortfeld leer lässt kann man sich je nach Distribution direkt ohne Pass einloggen (Suse) oder muss zuerst auf einem anderen System ein bekanntes Passwort verschlüsseln und den daraus resultierenden encrypteten String einfügen (Debian).

How to Reset forgotten Root passwords