‫May I ask you, well, is one of the most used databases and it's almost in every network either for
‫production or for development purposes, out-of-date or poorly configured MySQL installations may allow
‫you to get in the system.
‫So your first step is to discover the version.
‫MSF has a couple of modules for my rescue well, so let's have a look at them and gather information
‫from I ask you all server in order.
‫So do you remember as I do that there are, I ask you all databases in the result of the DEBE and Map
‫Command.
‫So then how do you view it?
‫I can view it by going to Services P three, three or six entering that command and sure enough, there
‫they are.
‫So there are some useful auxiliaries and Meadows Boyd for my ask you out.
‫And you can search it like that.
‫So here they are and like always, I will start with.
‫Version enumeration, although and MAP already did it.
‫So the options.
‫Just going to set our hosts as my variable.
‫So options.
‫And run, yeah, it's executed quickly and the result is the same as the Divi inmate command.
‫So check this out now.
‫I'm going to use the my school login module.
‫So the options.
‫And they are hosts of value comes up globally.
‫And there are some final variables, as you can see.
‫And I'll set blank passwords to true.
‫So the module will try blank passwords also.
‫So I'm going to start a brute force and just a little bit, but I first need to create a dictionary
‫file specialized for my you out.
‫And to accomplish this, I'll search on the Internet for a reasonable dictionary file, or you can also
‫create one by yourself like we did earlier.
‫But I just want to use the related words like this.
‫So here in the second row, there's a GitHub page.
‫And under default credentials, you will see a minuscule default password file.
‫I'm going to copy that and say thank you to the owner of the page.
‫OK, so I'll save it in a file in Colly.
‫And I will say that here in the desktop.
‫I think I did that before.
‫So let's go back to the MSF council.
‫Said the user pass final variable to the file that you've just created.
‫OK, then run.
‫And I think you can catch some user password pairs, so you should make a note of this finding because
‫you will need to use this one later.
‫OK, so so this means that you're really starting to discover and understand your target system.
‫Let's get into the next one.