Some ZTE routers use the device serial number (found on the sticker) to generate the admin password.
Important for your top wordlist: Include
nE7jA%5mas one of the top 5 entries for any ZTE audit. This is a well-documented backdoor credential.
ZTE uses a known PSK generation algorithm on some models. The default Wi-Fi key (which often equals the admin password) is derived as: zte router wordlist top
DefaultKey = substr( SHA1( MAC_address ), 0, 8 ) . substr( SHA1( MAC_address ), 12, 4 )
Example:
MAC = A4:3D:6E:12:34:56 → SHA1 → first 8 hex chars → E3F7A2D1
You can script this in Python to generate thousands of candidate passwords from a MAC address range. Some ZTE routers use the device serial number
admin:Telstra admin:Telstra1234 admin:Optimum vodafone:vodafone
If you know the ISP and model (e.g., ZTE F680 from Telstra), create a wordlist combining: Important for your top wordlist: Include nE7jA%5m as
Based on firmware dumps, ISP documentation, and thousands of real-world scans (please use this only for ethical testing on your own equipment), here is the top ZTE router wordlist:
| Rank | Username | Password | Common Model / ISP | |------|--------------|-----------------------------------|------------------------------| | 1 | admin | admin | Most ZTE home gateways | | 2 | admin | (blank) | Older ZTE models | | 3 | user | user | Some European ISPs | | 4 | admin | password | Generic | | 5 | admin | 1234 | ZXHN H108N | | 6 | root | root | Developer firmware | | 7 | admin | ZTEWiFi@123 | Recent ZTE F660/F680 | | 8 | admin | 123456 | Common backup | | 9 | support | support | ISP technician access | | 10 | admin | (MAC address last 6 chars) | Auto-generated by some ISPs |
Pro tip: For many ZTE routers, the default Wi-Fi password (printed on the sticker) is different from the web admin password. Don’t confuse them.