# Exploitation

> Brute-force, file read/write, UDF abuse, and hash cracking guides

- **URL:** https://hackindex.io/services/mysql/exploitation
- **Service:** [MySQL](https://hackindex.io/services/mysql.md)
- **Tags:** initial-access, execution
- **Published:** 2026-03-26
- **Updated:** 2026-03-29

MySQL exploitation targets the database for code execution and unauthorized access. User Defined Functions (UDFs) load shared libraries into the plugin directory, giving OS-level command execution through SQL queries.

Credential brute-forcing works well against MySQL since it commonly runs with weak root passwords or passwordless local access. Known CVEs in older versions enable authentication bypass, privilege escalation, and remote code execution without valid credentials.

## Guides

- [MySQL Credential Brute-Force](https://hackindex.io/services/mysql/exploitation/mysql-credential-brute-force.md)
- [MySQL File Read with LOAD_FILE](https://hackindex.io/services/mysql/exploitation/mysql-file-read-with-load-file.md)
- [MySQL File Write and Webshell via INTO OUTFILE](https://hackindex.io/services/mysql/exploitation/mysql-file-write-and-webshell-via-into-outfile.md)
- [MySQL Hash Extraction and Cracking](https://hackindex.io/services/mysql/exploitation/mysql-hash-extraction-and-cracking.md): Exploit MySQL to extract password hashes from user tables, then crack them offline using tools like Hashcat or John the Ripper to gain credential access.
- [MySQL UDF Privilege Escalation](https://hackindex.io/services/mysql/exploitation/mysql-udf-privilege-escalation.md)