Script mysql-variables

Script types: portrule
Categories: discovery, intrusive
Download: https://svn.nmap.org/nmap/scripts/mysql-variables.nse

Script Summary

Attempts to show all variables on a MySQL server.

Script Arguments

mysqluser

The username to use for authentication. If unset it attempts to use credentials found by mysql-brute or mysql-empty-password.

mysqlpass

The password to use for authentication. If unset it attempts to use credentials found by mysql-brute or mysql-empty-password.

Example Usage

nmap -sV --script=mysql-variables <target>

Script Output 

3306/tcp open  mysql
| mysql-variables:
|   auto_increment_increment: 1
|   auto_increment_offset: 1
|   automatic_sp_privileges: ON
|   back_log: 50
|   basedir: /usr/
|   binlog_cache_size: 32768
|   bulk_insert_buffer_size: 8388608
|   character_set_client: latin1
|   character_set_connection: latin1
|   character_set_database: latin1
|   .
|   .
|   .
|   version_comment: (Debian)
|   version_compile_machine: powerpc
|   version_compile_os: debian-linux-gnu
|_  wait_timeout: 28800

Requires

Author:

  • Patrik Karlsson

License: Same as Nmap--See https://nmap.org/book/man-legal.html