lolcreds

Public credential defaults and exposure patterns for authorized security testing.

Dell iDRAC

Dell Technologiesnetwork4 credentials1 default credential

Credentials4 documented
01

Default root/calvin Login

dell-idrac / default-root-calvin

Many iDRAC generations document a default local account root with password calvin, while newer systems may use a unique secure default password printed on the service tag or require password changes.

static defaultgenerated on installuser definedsecretusername/password

Default credentials

root:calvin

Location

public interface
iDRAC web UI, SSH, Redfish, IPMI, RACADM

Out-of-band management interfaces

config file
idrac-config.xml, idrac-config.json, ServerConfigurationProfile.xml, SCP.json

iDRAC Server Configuration Profile and configuration export files

artifact

support bundles, deployment profiles, and factory configuration records

artifact
ServerConfigurationProfile.xml, SCP.json, racadm-output.txt, supportassist.zip

iDRAC/RACADM exports and support bundles

Notes

Do not assume root/calvin on every Dell server: iDRAC9 and later deployments may use a unique secure default password on the chassis tag or enforce password changes.

02

Local iDRAC User Password

dell-idrac / local-user-password

iDRAC local users authenticate to web, SSH, Redfish, IPMI, and RACADM management channels. Passwords and password hashes may appear in configuration exports, deployment profiles, or management tooling.

user definedgenerated on installsecretusername/password

Location

public interface
iDRAC web UI / SSH / Redfish / IPMI / RACADM
config file
idrac-config.xml, idrac-config.json, ServerConfigurationProfile.xml, SCP.json

iDRAC Server Configuration Profile and configuration export files

secret store

password managers, OpenManage Enterprise templates, and deployment vaults

source code

RACADM scripts, Ansible playbooks, Terraform, and provisioning repos

logs

automation logs, RACADM output, and Redfish debug traces

artifact
ServerConfigurationProfile.xml, SCP.json, racadm-output.txt, supportassist.zip

iDRAC/RACADM exports and support bundles

03

Redfish / Web Session Token

dell-idrac / redfish-session-token

iDRAC Redfish and web sessions issue authentication/session tokens for API clients. These tokens grant management access for the authenticated user until expiry or logout.

generated on installsecrettoken

Location

http header
X-Auth-Token

Redfish session token returned by SessionService and sent on subsequent requests

http response
Location

Redfish session resource URI returned during login

config file
redfish-session.json, idrac-session.json

Redfish/iDRAC automation client session caches; session values more commonly appear in X-Auth-Token headers and logs

logs

HTTP traces and Redfish client debug output

04

SNMP / IPMI LAN Secrets

dell-idrac / snmp-ipmi-lan-secrets

iDRAC can expose SNMP community strings and IPMI-over-LAN user credentials for monitoring and remote management.

user definedsecretsecret value

Location

config file
idrac-config.xml, idrac-config.json, ServerConfigurationProfile.xml, SCP.json

iDRAC Server Configuration Profile and configuration export files

public interface
SNMP and IPMI LAN management services
source code

monitoring configs and provisioning scripts

artifact

server configuration profiles and support bundles

artifact
ServerConfigurationProfile.xml, SCP.json, racadm-output.txt, supportassist.zip

iDRAC/RACADM exports and support bundles

Scope

Authorized use

LOLCreds helps map the credential surface of real products: known defaults, generated values, credential locations, and exposure patterns.