lolcreds

Public credential defaults and exposure patterns for authorized security testing.

TeamCity

JetBrainsCI/CD4 credentials

Credentials4 documented
01

TeamCity User Password

teamcity / user-password

TeamCity users authenticate to the web UI, REST API, and build tools through local or external authentication backends.

user definedgenerated on installsecretusername/password

Location

public interface
TeamCity web UI, REST API, and agent/server endpoints
database

TeamCity user records and password verifier state for local authentication

config file

server configuration, auth modules, and deployment manifests

secret store

password managers and deployment vaults

logs

server auth logs and REST client traces

02

Personal Access Token

teamcity / access-token

TeamCity supports user access tokens for REST API access and integrations.

generated on installuser definedsecrettoken

Location

http header
Authorization

Bearer token or basic auth token for TeamCity REST API

database

TeamCity token storage associated with users

config file

build scripts, service connection config, IDE/CLI caches, and .env files

environment
TEAMCITY_TOKEN, TEAMCITY_ACCESS_TOKEN
secret store

CI/CD variables and vaults

source code

automation scripts and integration tests

logs

REST debug logs and build output

03

Super User Authentication Token

teamcity / super-user-token

TeamCity can provide a super user authentication token for emergency administration when normal authentication is unavailable.

generated on installsecrettoken

Location

logs

TeamCity server startup logs can display the super user token

public interface
TeamCity login page super user token flow
artifact

support bundles and collected server logs

Notes

Treat this as highly privileged emergency access; rotate/restart according to TeamCity guidance if exposed.

04

Secure Project Parameter / VCS Settings Token

teamcity / secure-project-parameter

TeamCity stores secure parameters, VCS root passwords/tokens, SSH keys, cloud profiles, and deployment credentials for build configurations.

user definedsecretsecret value

Location

database

TeamCity configuration database and secure value storage

config file

project settings, Kotlin DSL, VCS root config, and data directory XML

secret store

TeamCity credentials storage and external secret integrations

source code

Kotlin DSL repositories and build scripts referencing secret parameters

logs

build logs if parameters are printed or masking fails

Scope

Authorized use

LOLCreds helps map the credential surface of real products: known defaults, generated values, credential locations, and exposure patterns.