How to Create a MySQL Server BruteForce Tool with Python « Null Byte :: WonderHowTo

Hello aspiring hackers, It's been a while since I wrote a tutorial, so I figured I might just share one of the tools that I have created to help the community grow.ScenarioLet's say, that we have done all the recon(both passive and active) and we have scanned the web server for any vulnerabilities, and unfortunately we haven't got any server-side vulnerabilities but just a few client-side vulnerabilites and we all know how that isn't much help sometimes. So you scan for open ports and find that we have a 3306 port open(default port for mysql server). That's really good, if we can get access to it, cos we can upload shells and add more users to the database and other cool stuff. So let's begin...Step 1: Import Modules and Settings for ArgumentsSo python, has a module that we gonna use for the tool. You will just have to install the module for your OS. And for thesocksmodule as well, I'm sorry i don't have a link, but if you google it, you should find it easily. And that's what we will be using for anonymity.(We will be bruteforcing through the TOR network, so it will be slow). But you can just comment that line of code out if you want better speed or something...Image viaimgur.comStep 2: Threading and DictionarySince we gonna be bruteforcing, it is obvious that speeds is very important, so I included threading, so that we can be bruteforcing about 10 passwords at once. That will be really loud, but I think it's worth it. And also, we on TOR, so I guess we kinda safe.Image viaimgur.comStep 3: The Real DealSo ourmysql_brutefunction is where the magic happens, so what happens is, when we try to connect to the target server with the username and password and it fails, then we know that's not it. (I know right, that simple), but if we are successful, they ourcodevariable changes and we know we got a hit.And for thethreader, it just gets the value of the password from the queue to try and passes it to the function.Image viaimgur.comConclusionThanks for taking the time to read this. Well, if you have any questions, just ask and I will get to you as soon as i can. Happy hacking.God bless you.Wuzi out.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHack Like a Pro:Linux Basics for the Aspiring Hacker, Part 15 (Creating a Secure Tunnel to MySQL)How to Hack Databases:Hacking MySQL Online Databases with SqlmapHow To:Web Development 01 - Setting Everything UpHow To:Develop a social networking community website with PHP, MySQL & ActionScript 3How To:Setup PHP and MySQL for your Mac Mini serverHack Like a Pro:Snort IDS for the Aspiring Hacker, Part 3 (Sending Intrusion Alerts to MySQL)SPLOIT:How to Make an SSH Brute-Forcer in PythonHack Like a Pro:Linux Basics for the Aspiring Hacker, Part 14 (MySQL)How To:Program Your Own Little RAT (Part 1) Getting the Server WorkingNews:Advanced Cracking Techniques, Part 2: Intelligent BruteforcingHow To:The Essential Newbie's Guide to SQL Injections and Manipulating Data in a MySQL DatabaseHow To:Make a Change-of-IP Notifier in PythonHow To:Make a Gmail Notifier in PythonHow To:Code a Basic TCP/IP Client & Server Duo in PythonHack Logs and Linux Commands:What's Going On Here?Community Contest:Code the Best Hacking Tool, Win Bragging RightsHow To:Push and Pull Remote Files Securely Over SSH with PipesCommunity Byte:Coding a Web-Based Password Cracker in PythonHow To:How Hackers Take Your Encrypted Passwords & Crack ThemNews:Learning Python 3.x as I go (Last Updated 6/72012)Community Byte:Coding an IRC Bot in Python (For Beginners)News:Learn to Code in Python, Part One: Variables, Input and OutputGoodnight Byte:Coding an IRC Bot in Python (For Beginners)