: Look for config.inc.php in common directories or through Local File Inclusion (LFI). This file often contains cleartext credentials.