Listing MySQL databases
MySQL servers support storing multiple databases per instance. As system administrators with legitimate access or penetration testers who just compromised the server, we can list the available databases using Nmap. This is especially useful when we don't have a MySQL client at our disposal to quickly check what kind of information is stored in the database.
This recipe shows how to use Nmap NSE to list databases in a MySQL server.
How to do it…
Open a terminal and enter the following command:
$ nmap -p3306 --script mysql-databases --script-args mysqluser= <user>,mysqlpass=<password> <target>
The databases should be listed under the script results:
3306/tcp open mysql | mysql-databases: | information_schema | temp | websec | ids |_ crm
How it works...
The...