Script mysql-users

Script types: portrule
Categories: auth, intrusive
Download: https://svn.nmap.org/nmap/scripts/mysql-users.nse

Script Summary

Attempts to list all users on a MySQL server.

Script Arguments

mysqluser

The username to use for authentication. If unset it attempts to use credentials found by mysql-brute or mysql-empty-password.

mysqlpass

The password to use for authentication. If unset it attempts to use credentials found by mysql-brute or mysql-empty-password.

Example Usage

nmap -sV --script=mysql-users <target>

Script Output

3306/tcp open  mysql
| mysql-users:
|   test
|   root
|   test2
|   album
|   debian-sys-maint
|   horde
|   mediatomb
|_  squeezecenter

Requires

• mysql
• nmap
• shortport
• stdnse
• openssl

---

Author:

• Patrik Karlsson

License: Same as Nmap--See https://nmap.org/book/man-legal.html