Exploitation

On port 8082 I was greeted with a login page.

However I was able to authenticate without having to provide a password.

LogoH2 Database 1.4.199 - JNI Code ExecutionExploit Database

In order to exploit the console we have to run a few commands within the console.

The 'write native library' statement is what we first type in the console. We then click on run.

The 'load native library' is the second thing that we copy and paste into the console and then click on run.

The third thing is the 'evaluate script' which we can modify in order to run whatever we want.

Notice the output below to the whoami command.

We trasnferred our own payload that was generated using msfvenom.

We triggered it using 'cmd /c /path/to/the/reverse.exe'

PreviousSMBNextPrivilege Escalation

Last updated