🗄️ Sequel - Overview

📝 Machine Information

  • Name: Sequel
  • Platform: Hack The Box (Starting Point - Tier 1)
  • Difficulty: Very Easy
  • IP Address: 10.129.101.220

🎯 Objective

Gain access to an exposed MariaDB instance and retrieve the flag from the database records.

🚀 Walkthrough Summary

  1. Reconnaissance: Identified Port 3306 (MySQL/MariaDB) as open using rustscan.
  2. Enumeration: Confirmed the service version (MariaDB 10.3.27) and identified that root access without a password was allowed.
  3. Initial Access: Connected to the database using the mysql client.
  4. Database Discovery: Explored available databases and tables, identifying the htb database.
  5. Exfiltration: Retrieved the flag from the config table within the htb database.


🖼️ Proof of Compromise


Next Step