[soult]

I agree, though if you hardcode username and password into your application there's no need for fancy exploits.