YouTube – NIST 800-171 Control 3.5.7 Enforce a minimum password complexity/change of characters in passwords

CIRT.net – Default Password Database

CMMC Level 2 Assessment Guide

US-CERT – Risks of Default Passwords on the Internet

SANS Whitepaper – Vendor-Supplied Backdoor Passwords – A Continuing Vulnerability

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account

Nikto2 – Web Application Scanner

Open Web Application Security Project (OWASP) – Testing for Default Credentials

SANS – Password Construction Guidelines

SANS – Password Protection Policy