MariaDB

My Nmap version scan resulted in an open port 3306, which appears to be an SQL database.

I started an nmap script discovery to gather more information about which version of SQL is running, and I discovered that it's using MariaDB.

Now I am going to try to connect to this database with the command 'mysql -h IPaddress -u Username' and attempt to access it without any password.

I have gained access to the database. To navigate within this database, I am going to use these commands.

I started with 'show databases' and obtained them.

First, I checked the database named 'htb' and found a 'table' named 'users' which contained 4 users with associated email addresses.

I found the flag under the 'config' table.