CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-10-24 21:02:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Check for correct schema. Fixes #2221

Browse source
This commit is contained in:
dmiller 2026-07-18 04:29:20 +00:00
parent 7cd24319b3
commit b3948715c4
1 changed files with 12 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
scripts/mysql-dump-hashes.nse
View file

@ -75,6 +75,7 @@ action = function(host, port)
return
end
local pwcol = nil
local result = {}
for username, password in pairs(creds) do
local socket = nmap.new_socket()
@ -84,7 +85,17 @@ action = function(host, port)
local status, response = mysqlLogin(socket, username, password)
if ( status ) then
local query = "SELECT DISTINCT CONCAT(user, ':', password) FROM mysql.user WHERE password <> ''"
if not pwcol then
local status, rs = mysql.sqlQuery(socket,
"SELECT column_name FROM information_schema.columns "
.. "WHERE table_schema = 'mysql' AND table_name = 'user' "
.. "AND column_name IN ('password', 'authentication_string')")
if status then
pwcol = rs.rows[1][1]
end
pwcol = pwcol or "password"
end
local query = ("SELECT DISTINCT CONCAT(user, ':', %s) FROM mysql.user WHERE %s <> ''"):format(pwcol, pwcol)
local status, rows = mysql.sqlQuery( socket, query )
socket:close()
if ( status ) then