5432 PostgreSQL DB

PostgreSQL DB Connection, Enumeration and Exploitation

PostgreSQL DB Connection

Attempt connection with database. Can try without password. Possible username could be postgresql.

psql -h <host> -p <port> -U <username> -W <password> <database> 

Enumeration

Enumerate users with metasploit

PostgreSQL DB Exploitation

COPY FROM PROGRAM Command Execution (Metasploit)

PostgreSQL 9.3 - COPY FROM PROGRAM Command Execution (Metasploit)Exploit Database

Succesfully executed exploit