Port enumeration

With nmap, I found a mariaDB server open in 3306.

Database enumeration

I tried to log as root in the db.

mariadb -u root -h 10.129.95.232 --sql=OFF

The user root hasn't password, so, Im able to log in the db and obtain the flag.

select * from config;