Credential Abuse at Describe-Level