MySQL:
Enumeration
Covers MySQL version, auth, databases, users, grants, and data
MySQL enumeration
Techniques for enumerating MySQL databases, extracting schema info, user privileges, version fingerprinting, and identifying misconfigurations during penetration testing.
MySQL enumeration begins with version detection and authentication method identification on port 3306. The server greeting leaks the version string, capabilities, and authentication plugin before any credentials are sent.
Once connected, enumerate databases, tables, user accounts, and their privileges. The mysql.user table reveals password hashes and global grants. Checking variables like secure_file_priv, local_infile, and general_log shows what file operations and logging the server allows.