banner
[面包]MrTwoC

[面包]MrTwoC

你好,欢迎来到这个基于区块链的个人博客 名字:面包 / MrTwoc 爱好:跑步(5/10KM)、咖啡、游戏(MMORPG、FPS、Minecraft、Warframe) 兴趣方向:Rust、区块链、网络安全、量子信息(量子计算)、游戏设计与开发
bilibili
steam
email
github

[Simulation Penetration Testing]-HackTheBox-Tier1 _ Sequel - 2

image.png
Nmap scan IP
: db_nmap -sV 10.129.171.167
See that there is an SQL database service open on port 3306
Try to connect to the database
mysql -h IP -P port -u userID
image.png
Enter the database and see the database structure:
The following are three default database configurations
htb is a self-built database, guessing the flag is inside

=================================================================

Subsequent content is not public
Reason - contains flag

image.png
Enter the htb database and view two tables, open the config table
select * from config;
Get the flag

Loading...
Ownership of this post data is guaranteed by blockchain and smart contracts to the creator alone.