mySQL

You need credentials to access this, linpeas wil ltell you if there is no password.

Once you have credentials this is how you access it.

mysql -uroot -p
Password: <passowrd>

After this we enumerate databases to see what things we can get out of it.

Take this instance as an example, we were able to get credentials out of a database and then switch users.

show databases;
use <database-name>;
show tables;
select * from <table-name>;

Then if we can't find anything here we go onto enumerate for UDF exploitation.

Last updated