Enumerating and Pentesting MYSQL Database - Comptia Pentest+ TryHackMe Network Services 2

[@TriNguyen-dl9uu]

brilliant, if only I were given login credential to the database, it would be freaking easy wouldn't it

[@blusterwaffle8439]

I've just started on TryHackMe with a few of the courses; these videos are so useful and it's great to have these videos that give an overview of manual techniques. Thanks 🦾

[@asipalacios8701]

you didnt go through the john the ripper question which is why i came here

[@Cossaw]

Carl... We've talked about this... ;)

[@a_k1214]

LOGIN FAILED: root: (Unable to Connect: invalid packet: scramble_length(0) != length of scramble(21)) This after run MySQL login sir please can u solve it ????

[@tomkraus1610]

"You have error in your syntax" *Misspells command* "OH, IT IS A VIRUS" lol

[@Tracksuit_Cx]

great videos man its been really helping in my journey, really appreciate the extra information that you give in videos

[@HK-sw3vi]

good stuff man, thanks for the manual method. keep it going

[@maapi]

when it comes to cracking the hash using John The Ripper, I try using the command "john hash.txt" and I just get "john: command not found". I've already used "sudo apt-get install john" to make sure I have john, but it still doesn't work. Any ideas?

[@maapi]

Nevermind! After some playing around I realized I forgot the oldest trick in the book. Using "sudo" it works like a charm. I was so happy to see "doggie" show up on my screen lol

[@CoryResilient]

If MySQL port is open on a website. And you don't have the password but you have the user name which is root. Is their anyway to use sqlmap to dump the database? If a website is showing that port open. How do I break the URL to have sqlmap inject itself?

[@MotasemHamdan]

You can try brute forcing the password if mysql is open

[@CoryResilient]

@@MotasemHamdan I know that. You clearly didn't read the full comment lol. I said.. If MySQL port is open and vulnerable on a webserver. Can you not use sqlmap against the website and dump the database that way? If so. How. Break the URL with index.php?id=1? Or are you not that experienced.

[@MotasemHamdan]

@@CoryResilient Yes you can do that with sqlmap. You need to find a vulnerable parameter first and then use it in sqlmap

[@CoryResilient]

@@MotasemHamdan okay thank you. And where would I find the vulnerable parameter. I'm confused. Because on my target server. MySQL is open and vulnerable. So I thought. Oh ok. I want to use sqlmap to exploit it. But. All I have is an open port. No way of finding this parameter. In the actual URL. To feed sqlmap. I tried --crawl=2 and index.php?id=1 still can't get it for some reason. Any ideas?

[@vaganarora4570]

good stuff man :)

[@whelbe]

Hi, how were you able to find the password 'doggie'?

[@Ginter1]

Thank you ❤️

[@yiyo008]

gracias estan entretenidos saludos

[@MotasemHamdan]

de nada

[@miss_tech]

Im shocked of the amount of youtube videos and tutorials of passwordless mysql 😂 this is not true at all . Practically Servers passwords are too long and too complicated lettrrs and numbers to brute force 🙄