Listing MySQL users
MySQL servers support granular permissions to access databases. If we have credentials with access to the mysql.user table, we could list all users in the MySQL server. This is the reason why it is important to configure user permissions to be as restrictive as possible.
This recipe shows how to use Nmap to enumerate users in MySQL servers.
How to do it...
Open your terminal and use the following command:
$ nmap -p3306 --script mysql-users --script-args mysqluser=<username>,mysqlpass=<password> <target>
If the credentials provided have access to the mysql.user table, the user list is included in the script output:
PORT STATE SERVICE 3306/tcp open mysql | mysql-users: | root | crm | web |_ admin
How it works…
The -p3306 --script mysql-users --script-args mysqluser...
