Nmap Scripting Engine: Auditing MySQL Server

Nmap is an Open Source tool for Network Mapping, Network Inventory and Security Auditing. Nmap uses raw IP packets to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics.

 

MySQL is an Open Source Relational Data Base Management Systems (RDBMS).

 

I am using Nmap TCP SYN scan to find all open ports.

 

Nmap Scripts are located at

/usr/share/nmap/scripts

on Kali Linux.

 

Below snapshot shows the scripts we used to audit MySQL Server. Nmap Script disclose critical information like username, usernames without password. cersion, dump of hashes etc.

 

To run all the scripts related to MySQL execute below command.

# nmap --script "mysql-*" target_ip

 

From the above snapshots replace 127.0.0.1 with the IP you want to scan/audit.