Mysql Weak Pwd Xploit

GovernmentSecurity.org > The Archives > Exploit Articles

blackP0ster

Jan 15 2004, 05:21 PM

hiho!

i've now searched bout 2hrs and dind't find anything!

so can somebody help?
i've once seen an exploit, but that didn't work out well..

does somebody has a workin' exploit?

black

XtrA

Jan 15 2004, 08:23 PM

what is it?

Andy

Jan 16 2004, 03:00 AM

err......u mean logging in with sa weak passwords?

blackP0ster

Jan 16 2004, 06:05 AM

jop

i know an exploit but that doesn't work..

D-Devil

Jan 16 2004, 07:00 AM

you can use SQLEXEC as exploit , but you still have to scan
You can do this with xscan or any other scanner that supports mysql weak passes

hxxp://www.xfocus.org/programs/200209/10.html

That's the way I would do it , if you want to use the weak passes

Velle

Jan 16 2004, 12:00 PM

QUOTE (D-Devil @ Jan 16 2004, 07:00 AM)

there's a big difference between mssql and mysql !!

sqlexec is used for mssql and has nothing to do with exploiting weak passes from mysql...

if there would be a mysql exploit, plz share the knowledge

detonator

Jan 17 2004, 04:30 AM

hm hm hm

i still can't understand why the realy good search engine on this board is not used ....

ok i do it for you : http://www.governmentsecurity.org/forum/in...t=0&#entry11934 for example
http://www.governmentsecurity.org/forum/in...ysql+%2Bexploit
if you want all threads to this subject

greetz

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.