On a recent pentest I found myself being able to read the web configuration file in which there was the database username and password for a PostgreSQL version 9.4 service. That is good but now I needed to get a reverse shell connection so that I can have access to...

read more