JUZ P3NT3$T (-)@$(-)!M

              In one of my pentest engagement the scope was to test  a website abc.com/xyz/pqr.html and its mobile application. The website seems to be stronger and I was not able to find any vulnerability. So I switched to mobile application. When I was testing the mobile application, I was doing code analysis and found a URL in the code which was invoking a web service. The URL is as follows. https://abc.com/InstaWebServices/services/VersionCheck

     In few of me internal pentest engagement I was able to enumerate IP and credentials of database server, either by brute-forcing or searching the code for database connect string.      In last 6months I got the database credentials twice in client side code excluding the successful brute-force.     Previously when I use to get the credentials, I try to connect the server using a local client. Eg. If I get credentials of MS SQL Server then I download some client for it and try to view the database.     This time I was not really interested in doing that. Instead I was thinking to escalate my privilege and do something more than just viewing the database, because when I was reading the walk-through of Kioptrix it states that we can gain code execution using some commands executing in sql format.    So I googled ways to enumerate mssql and I got a very good link https://www.offensive-security.com/...