October 2018
Intermediate to advanced
528 pages
12h 33m
English
In previous chapters, we identified the PostgreSQL database service running on port 5432 during our Nmap scans against the Metasploitable operating system:

We can utilize a Metasploit auxiliary scanner to determine login information about the database. First, we configure Metasploit to utilize the scanner by typing the following:
msf> use auxiliary/scanner/postgres/postgres_login
Next, we want to configure two of the options. The first one sets the scanner to continue to scan, even if it finds a successful login. This allows us to scan a number of database instances as well as enumerate many usernames and passwords. We configure ...
Read now
Unlock full access