Here is my situation:
I already compromised the webserver. I want to attack the database server which has a IP of 192.168.100.2 which is a network that cannot be reach from outside. Through pivoting, I'm able to reach the database server. 192.168.100.2 have 135,139,445,3306 port open and is very likely to be running on windows xp sp3.
Some ways i tried:
- Tried this exploit "ms08_067_netapi". However, it stop at “attempting to trigger vulnerability”. Could it be antivirus, firewall that is causing the problem?
- Tried attacking smb client by using the list of username,password i dump from the webserver. No account seems to work.
Is there any other way I can attack on? Btw I'm doing all this over the internet, not locally.