Cybersecurity
Hardcoded Creds
Systematic hunt for hardcoded credentials, API keys, certificates, and default passwords in extracted IoT firmware. Covers /etc/shadow and passwd parsing, busybox httpd configs, telnet/dropbear stanzas, MQTT/cloud API key extraction, and cross-referencing against known default-credential databases.
- Publisher / source
- BitterSecurity/Decepticon (found on GitHub top repositories)
- Upstream record
- BitterSecurity/Decepticon
- Version
- Version 1
- Published
- Publication review
- Approved for publication · recorded passed scan 2026-11-04
- Content fingerprint
b1344ce34bda124df2175fb6359337ba61a940010ce17640859a35a4063d9a60