Mysql/mysql sql

De www.metasploit-es.com.ar

El modulo "mysql_sql" realiza consultas SQL sobre un servidor remoto proporcionandole un conjunto valido de credenciales.

msf > use auxiliary/admin/mysql/mysql_sql
msf auxiliary(mysql_sql) > show options

Module options (auxiliary/admin/mysql/mysql_sql):

   Name      Current Setting   Required  Description
   ----      ---------------   --------  -----------
   PASSWORD                    no        The password for the specified username
   RHOST                       yes       The target address
   RPORT     3306              yes       The target port
   SQL       select version()  yes       The SQL to execute.
   USERNAME                    no        The username to authenticate as

Para configurar el modulo, proporcionaremos PASSWORD, RHOST y USERNAME y dejaremos la consulta por defecto para obtener la version del servidor.

msf auxiliary(mysql_sql) > set PASSWORD s3cr3t
PASSWORD => s3cr3t
msf auxiliary(mysql_sql) > set RHOST 192.168.1.201
RHOST => 192.168.1.201
msf auxiliary(mysql_sql) > set USERNAME root
USERNAME => root
msf auxiliary(mysql_sql) > run

[*] Sending statement: 'select version()'...
[*]  | 5.1.41 |
[*] Auxiliary module execution completed
msf auxiliary(mysql_sql) >

• mysql/mysql_enum
• Modulos Admin Postgres

Original de www.offensive-security.com
Traducido por cbk999