Sequel — Where MySQL Meets Misconfiguration #17

Sequel is a very easy Linux machine from Hack The Box that introduces a common security misconfiguration in a MySQL service. The challenge focuses on service enumeration, discovering a database that allows access without a password, and using SQL queries to explore the database and uncover valuable information.

Along the way, you’ll practice identifying exposed services, connecting to MySQL, enumerating databases and tables, inspecting schemas, and extracting relevant data. It’s a great beginner-friendly exercise for understanding how a seemingly simple configuration mistake can expose sensitive information.