MoonshotAI
Featured
Kimi-K3
Kimi K3 is an open-weight, 2.8T-parameter native multimodal agentic model with a 1M-token context window, designed for frontier coding, knowledge work, and reasoning tasks.
AI repository intelligence
FR-AI / ANALYSISWhy it is worth attention
It systematically documents credential defaults and exposure patterns, enabling security engineers to quickly check and validate credential surfaces across many products, reducing the attack surface from default or weak credentials.
Who it is for
- Security engineers
- Penetration testers
- DevOps/SRE teams
- Product security teams
Use cases
- Auditing default credentials during deployment
- Validating credential exposure in cloud/SaaS configurations
- Building security checklists for hardening guides
- Researching credential patterns for vulnerability assessments
Strengths
- Community-driven and open source (CC BY 4.0)
- Structured YAML format with machine-readable entries
- Covers diverse categories (monitoring, cloud, etc.) with references to official docs and advisories
- Includes both static defaults and generated credentials with location patterns
Considerations
- Coverage depends on community contributions and may not include all products
- Entries rely on publicly available information and may not capture all undocumented behaviors
- Does not include live leaked credentials or breach data (by design)
README quick start
LOLCreds Data
This repository contains the YAML data entries for LOLCreds - Living Off the Land Credentials.
LOLCreds is a catalog of public credential defaults, credential locations, and exposure patterns for real products, SaaS/cloud services, appliances, and deployment packages.
The goal is to make product credential surfaces easier to check, understand, validate, explain, and fix.
Structure
Each product is described as a YAML file under entries/.
Example:
entries/adobe-experience-manager.yaml
Each entry may describe:
- known defaults;
- static default or generated credentials;
- undocumented credential behaviors linked to public advisories;
- credential locations;
- exposure patterns;
- what credentials look like;
- what they can unlock;
- public references.
Example entry
id: grafana
name: Grafana
category: monitoring
vendor: Grafana Labs
author: haxxm0nkey
credentials:
- id: default-admin
name: Default Admin Login
description: >
Grafana ships with a default admin user for first sign-in. Grafana
documents the default username and password as admin/admin unless
changed through configuration or packaging.
type: username_password
nature: [static_default]
sensitivity: secret
default:
username: admin
password: admin
location:
- type: public_interface
path: /login
detail: Grafana web UI, default port 3000
- type: config_file
path: grafana.ini
detail: '[security] admin_user and admin_password override defaults'
- type: environment
path: GF_SECURITY_ADMIN_USER, GF_SECURITY_ADMIN_PASSWORD
- type: secret_store
detail: Helm/Kubernetes Secrets, Docker secrets, CI/CD variables
notes: >
The first-login password-change prompt is not a substitute for changing
the default before exposure. Admin access can read dashboards, data
source configuration, and other stored integration secrets.
- id: kube-prometheus-stack-admin
name: kube-prometheus-stack Default Admin
description: >
The kube-prometheus-stack Helm chart deploys Grafana with a chart-level
admin password override commonly set to prom-operator.
type: username_password
nature: [static_default]
sensitivity: secret
default:
username: admin
password
Description
Living Off the Land Credentials. Public credential defaults, locations, and exposure patterns for real products, SaaS/cloud services, appliances, and deployment packages.
Related repositories
Similar projects matched by category, topics, and programming language.
xuchonglang
Featured
investing-for-beginners
A structured investing guide for Chinese beginners covering US stocks, options, and cryptocurrency, with focus on foundational concepts and risk awareness.
Krishnagangwal
Featured
CS-Fundamentals
A curated collection of Computer Science fundamentals (PDFs, notes, cheatsheets, interview question banks) for placement preparation, covering seven core subjects plus general resources.