Foothold

Once entering the flag.

Tried SSHing but still asks for a password. Which means we need to enumerate the database more.

We know that its MySQL. Which means we can try to use the load_file() function to read local files which works for MariaDB/MySQL.

When I tried this on the browser it doesn't work as expected for some reason. Maybe it was configured that way. But we were able to get a pair of credentials. uhc:uhc-11qual-global-pw

That allows us to SSH into the box.