lolcreds

Public credential defaults and exposure patterns for authorized security testing.

Veeam Backup & Replication

Veeamother4 credentials

Credentials4 documented
01

Console / Enterprise Manager User Password

veeam-backup / console-user-password

Veeam Backup & Replication uses Windows/domain/local users and roles for console, Enterprise Manager, REST API, and backup infrastructure administration.

user definedgenerated on installsecretusername/password

Location

public interface
Veeam console, Enterprise Manager, REST API, PowerShell, and service endpoints
database

Veeam configuration database users, roles, sessions, and encrypted credential records

config file

PowerShell scripts, service account configs, and deployment automation

secret store

Windows Credential Manager, Veeam credential manager, password vaults, and DPAPI-protected stores

logs

Veeam logs, REST traces, Enterprise Manager logs, and job session logs

02

Stored Managed Credential

veeam-backup / stored-managed-credential

Veeam stores credentials for vCenter/ESXi, Hyper-V, Windows/Linux servers, proxies, repositories, cloud providers, databases, NAS, and application-aware processing.

user definedgenerated on installsecretsecret value

Location

database

Veeam configuration database encrypted credentials and backup infrastructure records

secret store

Veeam credential manager, Windows DPAPI, enterprise vaults, and cloud secret stores

config file

job configs, PowerShell exports, unattended install files, and repository configs

logs

job logs, guest processing logs, repository logs, and plugin traces

03

Backup Encryption Password / Key

veeam-backup / encryption-password-key

Veeam backup encryption uses passwords/keys that are required to restore encrypted backups. Enterprise Manager may escrow or recover keys depending on configuration.

user definedgenerated on installsecretpassword

Location

database

Veeam configuration database encryption key metadata and password records

secret store

Veeam key management, Enterprise Manager key escrow, KMS/HSM integrations, and recovery vaults

artifact

encrypted backup files, configuration backups, and recovery media

logs

backup, restore, and key management logs

04

REST API Token / Session

veeam-backup / api-token-session

Veeam Enterprise Manager and newer Veeam APIs issue bearer tokens or sessions for automation clients.

generated on installsecrettoken

Location

http header
Authorization

Bearer token or Basic credentials used by Veeam API clients

http header
Cookie

web/API session cookie

config file

API scripts, PowerShell automation, .env files, and monitoring configs

environment
VEEAM_TOKEN, VEEAM_USERNAME, VEEAM_PASSWORD
secret store

CI/CD variables and automation vaults

logs

REST API logs and client traces

Scope

Authorized use

LOLCreds helps map the credential surface of real products: known defaults, generated values, credential locations, and exposure patterns.