fstab
fstab (file systems table) is a configuration file commonly found in the directory /etc
in Unix and Unix-like operating systems that defines how disk partitions, devices, or remote file systems should be automatically mounted during boot. It lists these file systems with their mount points, file system types, and relevant options. This allows for consistent and automated management of file system mounts.
bash-4.2$ cat /etc/fstab
#
# /etc/fstab
# Created by anaconda on Tue Jun 8 23:56:31 2021
#
# Accessible filesystems, by reference, are maintained under '/dev/disk'
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info
#
/dev/mapper/centos-root / xfs defaults 0 0
UUID=507d63a9-d8cc-401c-a660-bd57acfd41b2 /boot xfs defaults 0 0
/dev/mapper/centos-swap swap swap defaults 0 0
#//10.10.10.10/secret-share /mnt/secret-share cifs _netdev,vers=3.0,ro,username=zeno,password=FrobjoodAdkoonceanJa,domain=localdomain,soft 0 0
Checking the /etc/fstab
file reveals that there is an SMB share entry for //10.10.10.10/secret-share
mounting to the /mnt/secret-share
with a CLEARTEXT credential; zeno
:FrobjoodAdkoonceanJa
This was also picked up by PEAS earlier
The MySQL enumeration revealed that zeno is the lastname of the edward
user. There is a high likelihood that the password was reused. I will test it against the target SSH server.