A few years back, a game (Racecraft from Sandbox Games) had client log files point to an admin control panel behind a login page... whose login form had valid credentials inserted into it as default values.