In 2019, Moroccan news outlets reported the arrest of a young hacker in Casablanca who used a local wordlist to compromise over 500 Orange routers, creating a botnet for credential stuffing. The wordlist used was a variant of the now-famous "Orange Maroc" compilation.

If you are hired to audit a company’s network security in Casablanca or Rabat, you may use the Orange Maroc wordlist to test if employees have changed default router credentials. Critical note: This must be done with explicit written permission.

Avoid admin as a username if possible. Some Orange routers allow creating secondary admin accounts.

  • For users:

  • For educational and authorized testing purposes, the wordlist orange maroc can be found in the following legitimate repositories:

    Warning: Downloading or distributing these files may violate your ISP's terms of service. Always ensure you are complying with local laws and using them only on systems you own or have permission to test.