Mirrors/hacktricks
2
0
Fork 0
mirror of https://github.com/carlospolop/hacktricks synced 2024-11-21 12:13:17 +00:00
Code Issues Projects Releases Packages Wiki Activity
hacktricks/network-services-pentesting/pentesting-web/grafana.md
Carlos Polop d1647fc7c2 b
2024-07-19 11:06:54 +02:00

2.6 KiB
Raw Permalink Blame History

Grafana

{% hint style="success" %} Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks
{% endhint %}

Interesting stuff

  • The file /etc/grafana/grafana.ini can contain sensitive information such as admin username and password.
  • Inside the platform you could invite people or generate API keys (might need to be admin)
  • You could check which plugins are installed (or even install new)
  • By default it uses SQLite3 database in /var/lib/grafana/grafana.db
    • select user,password,database from data_source;

{% hint style="success" %} Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks
{% endhint %}