MySQL servers may contain several databases. As system administrators with legitimate access or penetration testers who just compromised the server, we can list the available databases using Nmap.
This recipe teaches how to use Nmap NSE to list databases in a MySQL server.
Open a terminal and enter the following command:
$ nmap -p3306 --script mysql-databases --script-args mysqluser=<user>,mysqlpass=<password> <target>
The databases should be listed under the script results.
3306/tcp open mysql | mysql-databases: | information_schema | temp | websec | ids |_ crm
The argument -p3306 --script mysql-databases --script-args mysqluser=<user>,mysqlpass=<password> tells Nmap to attempt a connection to the MySQL server using the given credentials (--script-args mysqluser=<user>,mysqlpass=<password>) and tries to list all the available databases in the server.
The script mysql-databases was written...