> 1/ Is there a kind of "super and updated" list for logins and passwords to > be found somewhere ?
I've not seen one. Usually, if working internally, the best success can be had with a custom list. Ask around for the commonly used passwords for the application you are testing. If working as an outsider, you'll probably have to create your own list from the various fragments scattered around the web. A pen-test list, such as is hosted by Securityfocus, might be a good place to ask for ready made lists as well. > 2/ What is the requested format ? The format is simply a listing of names, for the logins file, or passwords, for the password file. One per line, nothing fancy. -Ds _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
