📂 Enumeration

1. Database Connection Probe

I attempted to connect to the MariaDB instance using the mysql client.

Command Used:

mysql -h 10.129.101.220 -u root --skip-ssl

Note: The --skip-ssl flag was used to avoid potential connection issues with default SSL configurations.

Result: Successfully connected as the root user without a password.


2. Structural Discovery

Once inside the MariaDB monitor, I explored the database structure.

  • Listing Databases:
show databases;

Found a database named htb.

  • Switching to HTB Database:
use htb;

  • Listing Tables:
show tables;

Found two tables: config and users.


Next Step