I'm doing a penetration test for a client who wants me to try and target a specific server. I have managed to get credentials(hard-coded in an in-house app) to a limited account on this server that works with sftp, but won't give a shell with SSH.
The message states that shells are only available when connecting from the opsware jumpbox.
I've tried looking at known_hosts, hosts, whatever config files I have permission to grab, and searching all through the DNS. I can't find a reference to it anywhere.
What are some other tips I could use to get the host of the "opsware jumpbox"?