Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I found a Django app running on http://test.com that is running on debug mode. After trying some wrong paths I got with the django error screen showing the stacktrace and the credentials used to access the DB.
But this DB is used on the LAN, so I can't access remotely.
Is there a way to bypass this restriction, or even with the credentials there is no way to access this DB?
I want to know if this kind of scenarios is a game over or a hacker could still working with this vulnerabilities.
It depends...
Assuming the web server has access to the DB in the backend you could look for other vulnerabilities in the web application that allows RCE or even SSRF where you can further utilize the credentials you found.
See this for an example of how debug mode on Django was used to achieve RCE and extend access to other systems.
In case of RCE and SSRF you are executing commands as if you are the web server hence you inherit the connectivity of the web server which implies that you need to be able to communicate with the backend DB or other systems on the LAN not directly exposed to the public internet.
If you have mandate to look for issues on this application, I would certainly not stop there and neither would a good bug bounty hunter.
