mySQL
You need credentials to access this, linpeas wil ltell you if there is no password.
Once you have credentials this is how you access it.
mysql -uroot -p
Password: <passowrd>
After this we enumerate databases to see what things we can get out of it.
Take this instance as an example, we were able to get credentials out of a database and then switch users.
show databases;
use <database-name>;
show tables;
select * from <table-name>;
Then if we can't find anything here we go onto enumerate for UDF exploitation.
Last updated