wtf is lolcreds-data?

This repository holds the data behind LOLCreds, a public catalog of known default credentials, credential locations, and exposure patterns for real software products, cloud services, appliances, and deployment tools. The idea is to give security teams and administrators one place to check whether a product they use ships with a default username and password, a generated token, or some other credential that people commonly forget to change. Each product gets its own YAML file under an entries folder. A single entry can describe several kinds of credentials, such as a static default password, a token generated automatically at install time, or a locally created admin account, along with where that credential typically lives, like a config file, an environment variable, a web login page, or a secret manager. Entries also note what the credential can access if left unchanged, and they link out to the vendor documentation, advisories, or release notes the information came from. The example included in the README covers Grafana, showing entries for its default admin login, a distribution-specific password used by a popular Kubernetes Helm chart, locally created user passwords, and service account tokens, each with details on where to find or change them. Contributions are welcome for adding missing products, fixing categories, or improving references, but the project is explicit that only publicly documented information belongs here: no private credentials, leaked secrets, live API keys, or breach data should ever be submitted. The data itself is released under the CC BY 4.0 license, which allows reuse as long as the original source is credited.