[raiden990]

Hello people,
i hope this is the right place where to post this thread. During my hunting, i have found a web.config file from a website. It contains a lots of info, in particular Database name and credential to access. But the ip in the file is the localhost 127.0.0.1 and i can't find the real ip of this site beacuse it is behind Cloudflare WAF. I tried to crawl all urls to sql injection but nothing. I tried the same thing in login form, password recovery etc. etc. but nothing. 

Any suggestion about how to get in with these info? (Db name, username and password to login).

I think that this database is Mysql, because i have found the endpoint /phpMyAdmin with login, bruteforce not suceed. Some comment in the web.config files appears to be that the DB could be sql server.

Thanks

Best regards

Raiden990

[adelardsyah]

This is not the right forum to ask. You can ask here : https://breachforums.sb/Forum-General--16

[raiden990]

Thanks, then this thread can be closed here.

This is not the right forum to ask. You can ask here : https://breachforums.sb/Forum-General--16

[Tanaka]

The link in this thread is dead. Please reply to the PM you were sent to get your thread moved back to the Databases section.