Pentester took over factory network via an insulting admin password

During a factory audit, pentester Dahvid Schloss of Suzu Labs found admin credentials with the password "heyhackergof***yourself" in leet speak. The password was genuine and granted full domain control; the entry point was an outdated Windows 7 server vulnerable to EternalBlue.

• The admin password was a leet-speak insult to hackers and actually worked
• Access came through a Windows 7 server vulnerable to EternalBlue
• The pentester gained domain admin rights and other stored passwords
• Many other passwords were also insults aimed at hackers