Agent WranglersSupply chain and setup Required
Remove defaults and samples
Change every default password and remove sample apps, admin consoles and test pages before going live.
How to do it
Set new passwords for databases, admin panels and devices during setup. Delete example pages and install scripts. Close admin ports to the internet, or put them behind a login and a private network. Debug tools are covered in close debug and admin doors.
How to check
Try the default login for each product in use, and request each product's sample and install pages. Each login fails, and each page returns 404.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers security testing playbook: https://agentwranglers.se/playbook/adversarial-testing/supply-chain-and-setup/remove-defaults.