Hey there! You are correct that the remote MySQL credentials are not saved to a specific file, but are included directly in the database. For example, if you have given access to the remote host with IP 1.2.3.4 to the user "testuser" you would see the following in the mysql.user database for all databases that user owns. Here's an example showing this with a Wordpress database:
Code:
#mysql -e 'select * from mysql.user' | grep 1.2.3.4
1.2.3.4 testuser_wp N N N N N N N N N N N N N N N N N N N N N N N mysql_native_password *FC269A215016C698ACA9BAA49DF3FCD25B31F0F9 N 2021-05-18 12:51:47 NULL N