hacktricks/pentesting/pentesting-web/h2-java-sql-database.md
carlospolop 4c796b9bb3 Revert "Ad hacktricks sponsoring"
This reverts commit c2c270feef.
2022-04-28 16:41:46 +01:00

16 lines
569 B
Markdown

# H2 - Java SQL database
Official page: [https://www.h2database.com/html/main.html](https://www.h2database.com/html/main.html)
### Tricks
You can indicate a **non-existent name a of database** in order to **create a new database without valid credentials** (**unauthenticated**):
![](<../../.gitbook/assets/image (258).png>)
Or if you know that for example a **mysql is running** and you know the **database name** and the **credentials** for that database, you can just access it:
![](<../../.gitbook/assets/image (259).png>)
_**Tricks from box Hawk of HTB.**_