lolcreds

Public credential defaults and exposure patterns for authorized security testing.

HPE Integrated Lights-Out (iLO)

Hewlett Packard Enterprisenetwork4 credentials

Credentials4 documented
01

Factory Administrator Password

hp-ilo / factory-administrator-password

HPE iLO ships with a default local Administrator account whose initial password is unique to the server and printed on the iLO default network settings tag/label rather than being a universal static password.

generated on installuser definedsecretusername/password

Default credentials

Administrator

Location

public interface
iLO web UI, SSH, Redfish, IPMI, Remote Console

Out-of-band management login surfaces

artifact

server labels/tags, asset inventories, deployment records, and support bundles

config file

iLO configuration exports and scripted setup files

Notes

Only the username is universal; the password is device-specific and should not be modeled as a literal default.

02

Local iLO User Password

hp-ilo / local-user-password

iLO local users authenticate to management interfaces including browser UI, SSH, Redfish, IPMI, and remote console. Provisioning tools often carry these credentials for fleet setup.

user definedgenerated on installsecretusername/password

Location

public interface
iLO web UI / SSH / Redfish / IPMI / Remote Console
config file

iLO RESTful Interface Tool scripts, XML/JSON exports, and server profile configuration

secret store

OneView, password managers, and deployment vaults

source code

provisioning scripts, Ansible playbooks, and CI variables

logs

RESTful Interface Tool, Redfish client, and deployment logs

03

Redfish Session Token

hp-ilo / redfish-session-token

HPE iLO Redfish sessions return session tokens that clients send in X-Auth-Token headers for subsequent management API calls.

generated on installsecrettoken

Location

http header
X-Auth-Token

Redfish authentication token for iLO API requests

http response
Location

Created Redfish session URI returned by login

logs

HTTP traces and client debug output

config file

API client token caches and automation scripts

04

SNMP / IPMI / Directory Integration Secrets

hp-ilo / snmp-ipmi-directory-secrets

iLO deployments may contain SNMP community strings, IPMI LAN credentials, and LDAP/directory bind credentials used for monitoring and centralized authentication.

user definedsecretsecret value

Location

config file

iLO configuration exports and management profiles for SNMP, IPMI, and directory settings

public interface
SNMP, IPMI LAN, and directory-backed login paths
source code

monitoring and provisioning templates

secret store

HPE OneView, vaults, and configuration management secrets

Scope

Authorized use

LOLCreds helps map the credential surface of real products: known defaults, generated values, credential locations, and exposure patterns.