{"id":117,"date":"2010-01-22T03:35:32","date_gmt":"2010-01-22T08:35:32","guid":{"rendered":"http:\/\/zitstif.no-ip.org\/?p=117"},"modified":"2010-01-22T03:36:01","modified_gmt":"2010-01-22T08:36:01","slug":"mysqldict-py","status":"publish","type":"post","link":"http:\/\/zitstif.no-ip.org\/?p=117","title":{"rendered":"mysqldict.py"},"content":{"rendered":"<p>After taking a few months to dilly about with python and learn the ins and outs of it to a certain extent, I decided to write a program that does dictionary attacks on mysql.<\/p>\n<p>Plain text:<br \/>\n<a title=\"http:\/\/zitstif.no-ip.org\/mysqldict.txt\" href=\"http:\/\/zitstif.no-ip.org\/mysqldict.txt\" target=\"_blank\">http:\/\/zitstif.no-ip.org\/mysqldict.txt<\/a><\/p>\n<p>Tar archive:<br \/>\n<a title=\"http:\/\/zitstif.no-ip.org\/mysqldict.tar\" href=\"http:\/\/zitstif.no-ip.org\/mysqldict.tar\" target=\"_blank\">http:\/\/zitstif.no-ip.org\/mysqldict.tar<\/a><br \/>\nMD5Sum: f0e07ca29cc783c6c27f3829f579d37e<\/p>\n<p>The beauty of this program, is that it actually does a test on the remote host and tells you whether or not that the remote host allows remote MySql authentication.<\/p>\n<p>Here&#8217;s a quick peek of mysqldict.py in action used inside of a bash shell script (IP addresses hidden of course):<\/p>\n<pre lang=\"bash\">:~\/for i in $(httplast | egrep -v \"${WANIP}|127.0.0.1|192.168.\"  | awk '{print $1}' | sort | uniq); do nc -z -w1 ${i} 3306; if [[ \"$?\" == \"0\" ]]; then .\/mysqldict.py -t ${i}; fi; done\r\nmysqldict.py:\r\nPort 3306 on 115.##.##.#1 appears to be open..\r\nA connection has been made and here are the results of the test:\r\nThis host does not allow remote administration on MySQL\r\nmysqldict.py:\r\nPort 3306 on 62.##.##.#1 appears to be open..\r\nA connection has been made and here are the results of the test:\r\nThis host is open to MySQL dictionary attacks!\r\nmysqldict.py:\r\nPort 3306 on 66.##.##.#1 appears to be open..\r\nA connection has been made and here are the results of the test:\r\nThis host is open to MySQL dictionary attacks!<\/pre>\n<p>If you&#8217;re wondering what the command &#8216;httplast&#8217; is, let me explain. I&#8217;m too lazy to type out: <strong>cat \/var\/log\/apache2\/access.log<\/strong> , so I created an <strong>alias <\/strong>to do handle this for me.<\/p>\n<p>The tool itself, I feel is pretty self\u00a0explanatory, but if you have any questions feel free to leave a comment or shoot me an e-mail.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>After taking a few months to dilly about with python and learn the ins and outs of it to a certain extent, I decided to write a program that does dictionary attacks on mysql. Plain text: http:\/\/zitstif.no-ip.org\/mysqldict.txt Tar archive: http:\/\/zitstif.no-ip.org\/mysqldict.tar MD5Sum: f0e07ca29cc783c6c27f3829f579d37e The beauty of this program, is that it actually does a test on &hellip; <a href=\"http:\/\/zitstif.no-ip.org\/?p=117\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">mysqldict.py<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,3],"tags":[19,18],"class_list":["post-117","post","type-post","status-publish","format-standard","hentry","category-code","category-posts","tag-mysql","tag-mysqldict"],"_links":{"self":[{"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/posts\/117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=117"}],"version-history":[{"count":6,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/posts\/117\/revisions"}],"predecessor-version":[{"id":123,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=\/wp\/v2\/posts\/117\/revisions\/123"}],"wp:attachment":[{"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=117"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/zitstif.no-ip.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}