From: pagvac (unknown.pentester@gmail.com)
Date: Mon Mar 06 2006 - 16:45:33 EST
I advise *researching* and *common sense*. One of the first things I
usually do is check the vendor's website to find the software manual
(which should hopefully contain the default username/password combo).
Unfortunately, from what I researched, Cognos has restricted access to
support services [http://support.cognos.com] (i.e.: manuals).
*However*, entering some bogus data into their web forms might do the
job to get an account 8-] .
Also use common sense password guessing. i.e.:
cognos/cognos
Cognos/Cognos
admin/congnos
admin/Cognos
default/cognos
default/Cognos
guest/cognos
guest/Cognos
cognos/enterprise
admin/[null]
guest[null]
test/test
testuser/testpass
username/password
admin/login
admin/letmein
admin/login
web/web
www/www
[null]/admin
and other variations of commonly used default credentials...
On 3/5/06, 3 shool <3shool@gmail.com> wrote:
> Hi,
>
> I'm testing a client's server running Cognos Enterprise BI, ReportNet
> (Datawarehousing system), on Windows 2003 and IIS 6.0. Does any one
> know default username and password for this datawarehousing system?
>
> Await your reply.
>
> ------------------------------------------------------------------------------
> This List Sponsored by: Lancope
>
> "Discover the Security Benefits of Cisco NetFlow"
> Learn how Cisco NetFlow enables cost-effective security across distributed
> enterprise networks. StealthWatch, the veteran Network Behavior Analysis (NBA)
> and Response solution, leverages Cisco NetFlow to provide scalable,
> internal network security.
> Download FREE Whitepaper "Role of Network Behavior Analysis (NBA) and Response
> Systems in the Enterprise."
>
> http://www.lancope.com/resource/
> ------------------------------------------------------------------------------
>
>
------------------------------------------------------------------------------
This List Sponsored by: Cenzic
Concerned about Web Application Security?
As attacks through web applications continue to rise, you need to proactively
protect your applications from hackers. Cenzic has the most comprehensive
solutions to meet your application security penetration testing and
vulnerability management needs. You have an option to go with a managed
service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm).
Download FREE whitepaper on how a managed service can help you:
http://www.cenzic.com/news_events/wpappsec.php
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request@cenzic.com
------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:37 EDT