Mysql Weak Pwd Xploit

#1 blackP0ster

Private First Class

Group: Members
Posts: 129
Joined: 02-December 03

Posted 15 January 2004 - 09:21 AM

hiho!

i've now searched bout 2hrs and dind't find anything!

so can somebody help?
i've once seen an exploit, but that didn't work out well..

does somebody has a workin' exploit?

black

#2 Guest_XtrA_*

Group: Guests

Posted 15 January 2004 - 12:23 PM

what is it?

#3 Andy

Private First Class

Group: Members
Posts: 59
Joined: 02-December 03

Posted 15 January 2004 - 07:00 PM

err......u mean logging in with sa weak passwords?

#4 blackP0ster

Private First Class

Group: Members
Posts: 129
Joined: 02-December 03

Posted 15 January 2004 - 10:05 PM

jop

i know an exploit but that doesn't work.. :(

#5 D-Devil

Private

Group: Members
Posts: 14
Joined: 10-January 04

Posted 15 January 2004 - 11:00 PM

you can use SQLEXEC as exploit , but you still have to scan
You can do this with xscan or any other scanner that supports mysql weak passes

hxxp://www.xfocus.org/programs/200209/10.html

That's the way I would do it , if you want to use the weak passes

#6 Guest_Velle_*

Group: Guests

Posted 16 January 2004 - 04:00 AM

D-Devil, on Jan 16 2004, 07:00 AM, said:

there's a big difference between mssql and mysql !!

sqlexec is used for mssql and has nothing to do with exploiting weak passes from mysql...

if there would be a mysql exploit, plz share the knowledge ;)

#7 detonator

Private First Class

Group: Members
Posts: 76
Joined: 29-August 03

Posted 16 January 2004 - 08:30 PM

hm hm hm

i still can't understand why the realy good search engine on this board is not used ....

ok i do it for you : http://www.governmen...t=0&#entry11934 for example
http://www.governmen...ysql+%2Bexploit
if you want all threads to this subject

greetz

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Forums: Mysql Weak Pwd Xploit - Forums