lolcreds

Public credential defaults and exposure patterns for authorized security testing.

ServiceNow

ServiceNowsaas4 credentials

Credentials4 documented
01

Local/User Password

servicenow / local-user-password

ServiceNow users authenticate through local passwords, SSO, LDAP, or external identity providers. Local admin/service users and integration users remain important credentials for UI, REST, SOAP, and MID Server operations.

user definedgenerated on installsecretusername/password

Location

public interface
ServiceNow UI, REST API, SOAP API, and inbound integrations
database

sys_user and related authentication records within the instance

secret store

enterprise password vaults and integration credential stores

source code

integration scripts, MID Server configs, and CI/CD variables

logs

system logs, transaction logs, and integration debug logs

02

OAuth / Personal Access Token

servicenow / personal-access-token-oauth

ServiceNow supports OAuth applications, bearer tokens, refresh tokens, and API key-style credentials for integrations.

generated on installuser definedsecrettoken

Location

http header
Authorization

Bearer token or Basic credentials used by REST/SOAP clients

database

OAuth application, token, and refresh token records in the instance

config file

integration configs, appsettings, scripts, Postman collections, and .env files

environment
SERVICENOW_TOKEN, SN_TOKEN, SNOW_TOKEN, SERVICENOW_CLIENT_SECRET
secret store

CI/CD variables, credential stores, and vaults

logs

REST debug logs, integration logs, and MID Server logs

03

API Key

servicenow / api-key

ServiceNow API key records can authenticate selected integrations or protect scripted APIs depending on plugin and configuration.

generated on installuser definedsecretAPI key

Location

http header
x-sn-apikey

ServiceNow API key header used by API key authentication

database

API key records and access policy configuration

config file

client scripts, integration settings, and API collections

secret store

password vaults and CI/CD secret variables

logs

HTTP traces and integration debug logs

04

MID Server / Credential Store Secret

servicenow / mid-server-and-credential-store

ServiceNow stores discovery/orchestration credentials and MID Server secrets for LDAP, SSH, Windows, SNMP, cloud, and application integrations.

user definedgenerated on installsecretsecret value

Location

database

credential tables, discovery credentials, OAuth profiles, and MID Server configuration records

secret store

ServiceNow credential store, external credential resolvers, and enterprise vaults

config file

MID Server config.xml, wrapper config, and integration property files

logs

MID Server agent logs, ECC queue payload traces, and discovery logs

Scope

Authorized use

LOLCreds helps map the credential surface of real products: known defaults, generated values, credential locations, and exposure patterns.