ZTE routers often have in older firmware (pre-2018): admin:admin always works after factory reset. Some Telco firmwares disable admin but leave user:user with full config access via hidden URLs.
hydra -l admin -P zte_top_wordlist.txt 192.168.1.1 http-get /cgi-bin/login zte router wordlist top
GitHub is a goldmine for this. Many researchers upload "ZTE-specific" dictionaries compiled from thousands of successful audits. Look for lists labeled zte-default-passwords.txt or isp-zte-keys.zip . 2. Hashcat and John the Ripper Community Lists ZTE routers often have in older firmware (pre-2018):
The following wordlist represents the most frequently used default credentials across various ZTE models, including popular series like ZXDSL and ZXHN: ZTE Default Login - Username, Password and IP Address Password and IP Address