Check for Database Config Files
enumerationlinuxchecklist
Summary
Web app config files (conf.php, defines.php) usually hold DB credentials.
Walkthrough
Hunt web application config files for database connection credentials.
Commands
bash
grep -ri password /var/www 2>/dev/null