Skip to content
HackIndex.io
MySQL
Service

MySQL

MySQL attack coverage spanning version fingerprinting, user grants, default creds, FILE privilege abuse, UDF exploitation, hash cracking, config harvesting, and data exfiltration via dumps and file output

:3306 13 guides 5 phases
1 min read Created: Dec 28, 2025 Updated: Jul 14, 2026

MySQL runs on TCP port 3306 and is one of the most widely deployed relational databases. Nmap identifies it as mysql. MySQL and its fork MariaDB power a large share of web applications and are common targets in both external and internal assessments.

Remote root login without a password, weak credentials, and overly permissive user grants are frequent findings. MySQL's LOAD_FILE() and INTO OUTFILE functions can read and write files on the server when the database user has sufficient privileges. User-defined functions (UDFs) provide a path to OS command execution.

Connect with mysql client or test credentials with hydra and crackmapexec. After login, check the current user's privileges, enumerate databases, and look for sensitive data. Nmap's mysql-info, mysql-enum, and mysql-empty-password scripts cover initial enumeration.

Enumeration

Covers MySQL version, auth, databases, users, grants, and data

1

MySQL enumeration

Techniques for enumerating MySQL databases, extracting schema info, user privileges, version fingerprinting, and identifying misconfigurations during penetration testing.

Jan 18, 2026 • 4 min read

Vulnerability Discovery

Default creds, FILE privilege, remote access, and weak hash checks

4

Exploitation

Brute-force, file read/write, UDF abuse, and hash cracking guides

5
MySQL Hash Extraction and Cracking

MySQL Hash Extraction and Cracking

Exploit MySQL to extract password hashes from user tables, then crack them offline using tools like Hashcat or John the Ripper to gain credential access.

Mar 26, 2026 • 5 min read

Post-Exploitation

Enumerate MySQL internals, harvest creds from app configs

2

MySQL Post-Exploitation Enumeration

Covers MySQL enumeration techniques post-compromise, including user privilege extraction, database schema mapping, credential harvesting, and UDF-based privilege escalation paths.

Mar 26, 2026 • 3 min read

Data Exfiltration

Guides for extracting MySQL data via dumps, queries, and file output

1