#MySQL [ port : 3306 ] :

MySQL: is an open-source relational database management system based on SQL.

• It is typically used to store records, customer data, and is commonly deployed to store web application data.
• We can use aux modules to enumerate the version of MySQL, perform Brute-Force attacks, execute SQL queries and much more.

** #MSF modules :**

To search:

• search type:auxiliary name:mysql

auxiliary/scanner/mysql/mysql_login

• Bruteforce MySQL creds.

auxiliary/admin/mysql/mysql_sql

• Execute SQL Queries (Requiers Admin Privilages) Don't forget the; after setting the "SQL" Query

mysql_writeable_dirs

• enumerates the system writeable directories through MySQL quite useful!

mysql_hashdump

• This module extracts the usernames and encrypted password hashes from a MySQL server and stores them for later cracking.

mysql_schemadump

• dump all schema

** #nmap_scripts:**

mysql-empty-password

• nmap script for searching for users that can login with no password

mysql-info

• self explaintory # if we found Interactive-Client within the capabilites then we can run system shell through mysql

mysql-users --script-args mysqluser=<user>,mysqlpass=<pass>

• enumerate users

mysql-variables --script-args mysqluser=<user>,mysqlpass=<pass>

• useful info

mysql -h <host> -u root

commands :

• show databases;
• use <database>;
• select load_file("<file>"); # for reading the file

How to connect to a mysql database:

Example

mysql -u db_admin -h 192.203.119.3 -ppassword@123