YouTube – NIST 800-171: 3.5.9 Allow Temporary Password Use

CIRT.net – Default Password Database

CMMC Level 2 Assessment Guide

US-CERT – Risks of Default Passwords on the Internet

SANS Whitepaper – Vendor-Supplied Backdoor Passwords – A Continuing Vulnerability

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account

Nikto2 – Web Application Scanner

Open Web Application Security Project (OWASP) – Testing for Default Credentials

SANS – Password Construction Guidelines

SANS – Password Protection Policy