Skip to content
HackIndex.io

MySQL:

Enumeration

Covers MySQL version, auth, databases, users, grants, and data

1 guide • Created Dec 28, 2025 • Updated Mar 29, 2026
1 guide

MySQL enumeration

Techniques for enumerating MySQL databases, extracting schema info, user privileges, version fingerprinting, and identifying misconfigurations during penetration testing.

Jan 18, 2026 • 4 min read

MySQL enumeration begins with version detection and authentication method identification on port 3306. The server greeting leaks the version string, capabilities, and authentication plugin before any credentials are sent.

Once connected, enumerate databases, tables, user accounts, and their privileges. The mysql.user table reveals password hashes and global grants. Checking variables like secure_file_priv, local_infile, and general_log shows what file operations and logging the server allows.