banner
[面包]MrTwoC

[面包]MrTwoC

你好，欢迎来到这个基于区块链的个人博客 名字：面包 / MrTwoc 爱好：跑步(5/10KM)、咖啡、游戏(MMORPG、FPS、Minecraft、Warframe) 兴趣方向：Rust、区块链、网络安全、量子信息(量子计算)、游戏设计与开发
bilibili
steam
email
github
HomeArchives[Code]Rust[区块链]Blockchain[引擎]Rust-Bevy[安全]Web2Security

[Simulation Penetration Testing]-HackTheBox-Tier1 _ Sequel - 2

#HackTheBox#Web2Security111
AI Translation
This post is translated from Chinese into English through AI.View Original
AI-generated summary
The user used Nmap to scan an IP address and found a SQL database service open on port 3306. They connected to the database and discovered a database structure with three default databases. They suspected the flag was inside one of them. They accessed the "htb" database, found two tables, and obtained the flag from the "config" table. Additional information containing the flag is not disclosed.

image.png
Nmap scanning IP
: db_nmap -sV 10.129.171.167
See that there is a SQL database service open to port 3306
Attempt to connect to the database
mysql -h IP -P port -u userID
image.png
Enter the database and see the database structure:
The following are three default database configurations
htb is a self-built database, guessing that the flag is inside

=================================================================

Subsequent content is not public
Reason - contains flag

image.png
Enter the htb database and view two tables, open the config table
select * from config;
Get the flag

Loading...
Ownership of this post data is guaranteed by blockchain and smart contracts to the creator alone.