# Grafana LFI exploit ```bash /var/lib/grafana/grafana.db /etc/grafana/grafana.ini ``` # Hash `Grafana` uses the `PBKDF2_HMAC_SHA256` hashing algorithm and stores the hash digests in hexadecimal and the salt values in plaintext format in the database. We can use tools like `grafana2hashcat` to crack it.