🗄️ Sequel - Overview
📝 Machine Information
- Name: Sequel
- Platform: Hack The Box (Starting Point - Tier 1)
- Difficulty: Very Easy
- IP Address: 10.129.101.220
🎯 Objective
Gain access to an exposed MariaDB instance and retrieve the flag from the database records.
🚀 Walkthrough Summary
- Reconnaissance: Identified Port 3306 (MySQL/MariaDB) as open using
rustscan. - Enumeration: Confirmed the service version (MariaDB 10.3.27) and identified that root access without a password was allowed.
- Initial Access: Connected to the database using the
mysqlclient. - Database Discovery: Explored available databases and tables, identifying the
htbdatabase. - Exfiltration: Retrieved the flag from the
configtable within thehtbdatabase.
🔗 Quick Links
🖼️ Proof of Compromise

Next Step