Capsule

Before trying to guess or crack anything, check whether every exposed service actually requires you to prove your identity. Some databases will happily show you what's inside if you just ask. Once you're in, don't stop at the obvious collection — look at every field in every document, including ones that seem like unrelated accounts, since notes left behind by an admin can point you to a completely different service.