What are two exploitation methods for obtaining the data.mdb file mentioned in the article?
The first method requires already having vCenter local administrator privileges to directly access the file at /storage/db/vmware-vmdir/data.mdb. The second method involves obtaining the data.mdb file from vCenter backup files, which could be leaked or improperly secured.
---
**Related reading:**
- vSphere Development Guide 6 - vCenter SAML Certificates — original article
- Penetration Techniques - Deleting Single Windows Log Entries
- Penetration Technique: Remote Access to Exchange PowerShell
- Zimbra SOAP API Development Guide 2
---
**Related reading:**
- vSphere Development Guide 6 - vCenter SAML Certificates — original article
- Penetration Techniques - Deleting Single Windows Log Entries
- Penetration Technique: Remote Access to Exchange PowerShell
- Zimbra SOAP API Development Guide 2
data.mdblocal administrator privilegesvCenter backup filesexploitation methods