hacktricks/pentesting/pentesting-web/h2-java-sql-database.md

H2 - Java SQL database

Official page: https://www.h2database.com/html/main.html

Tricks

You can indicate a** non-existent name a of database** in order to create a new database without valid credentials (unauthenticated):

Or if you know that for example a** mysql is running** and you know the** database name** and the **credentials **for that database, you can just access it:

Tricks from box Hawk of HTB.