Questions tagged [mariadb]
MariaDB is an SQL database server.
17
questions
0
votes
2answers
48 views
How to connect to a MariaDB database after collecting data about users and passwords with a SQLI? [closed]
I'm trying to breach a dummy MariaDB database which is vulnerable to SQLI and is storing sensitive data about its users and their passwords. I've collected all the data I could collect, but now how am ...
0
votes
1answer
62 views
How to know whether mysql connection is using SSL or TLS connection?
I want to verify whether mysql remote connection is using tls/ssl connection for security purposes.
I ran status command to check initially:
mysql> status
--------------
mysql Ver 8.0.19 for osx10....
0
votes
1answer
155 views
Is it possible to locate web document root using SQL query/SQL Injection?
I have access to MySQL database which the current user has FILE privilege. I want to upload a web shell but I do not know the root directory of the web server.
Is it possible to somehow locate the ...
0
votes
1answer
200 views
SQLMap Only Returns information_schema
I run this command python sqlmap.py -u https://acme.com/post.php --data "id=1" --tamper="between,randomcase,space2comment" -v 3 --random-agent --dbs but SQLMap only returns ...
0
votes
0answers
268 views
Sqlmap not detects error based injection
I am working on Hack the VM (hard machine) for my OSCP preparation
There is a web app with two drop down boxes.. Year and month.. both contain numbers and a submit to fetch data from DB based on year ...
4
votes
1answer
302 views
How does MariaDB's ed25519 auth scheme work?
Newer versions of MariaDB (a MySQL database server fork) have a new password based auth scheme called "ed25519". The docs are very sparse regarding how it works and what it does.
https://mariadb.com/...
0
votes
0answers
1k views
SQL Injection bypass UNION filter/restriciton
I've recently had an interesting interview exercise I haven't completed and it does puzzle me what kind of filter/protection they've used.
The vuln app is a PHP with simple MariaDB (5.5.56) back-end, ...
1
vote
0answers
48 views
What is the default cipher for SSL connections in Azure for MariaDB?
According to Microsoft's Documentation, Azure should be configured to use SSL for connections.
In regards to default settings, they state the following:
By default, the database service should be ...
0
votes
1answer
490 views
Is it secure to store my mysql password in a const std::string?
I am implementing a C++ server with a mariadb backend. I have to access my database and I do so using the mariadbpp (its c++ connector). Though I can use mysql_config_editor and store the passwords in ...
1
vote
2answers
2k views
SQL Injection on MariaDB
I am trying to exploit (legally) a MariaDb database with an SQLi vulnerability.
I have identified the vulnerability here...
/?o=1&page=app
The o=* is vulnerable and produces the following error....
1
vote
2answers
962 views
SQL-injection, unable to get it to work!
I've recently found a SQL-injection vulnerability in one of our web applications. I've been able to exploit this SQLi, but only able to extract some very basic information. I'm not an expert pentester ...
0
votes
1answer
841 views
SQl Injection MariaDB
Im found a sql query that is injectable below
"car_info = query("select models, color, running from cars where manual = 1 AND UID = '{}' LIMIT 1".format(uid))")
Where '{}' is the point of injection.
...
0
votes
1answer
2k views
SQL inject MariaDB with SQLMAP
I'm fairly new to sqlmap but I have tried a lot of attacks and have been successful except for this one attack that I have tried. SQLMAP won't detect this nor try to inject an error like this.
So how ...
0
votes
1answer
99 views
Linking mail server with application database
I have a web application running on node.js, backed by a MongoDB database which stores user data etc... I'd like to offer my users an email account, so I've set up a mail server using Postfix, dovecot,...
3
votes
1answer
1k views
Are MariaDB's encryption and compression functions secure?
MariaDB [(none)]> SET @key_str = SHA2('Is it secure?',512);
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> SET @crypt_str = AES_ENCRYPT('cleartext',@key_str);
Query OK, 0 rows affected (...
2
votes
4answers
11k views
Simple SQL injection to bypass login in MariaDB
I'm trying out SQL Injection on my localhost. I have a simple HTML form, with a username, password and a submit button. So after clicking on the submit, user is redirected from login.html to a page ...
-1
votes
1answer
533 views
Is it true that blind SQL injection does not work on MariaDB?
I was told by someone on the network that MariaDB was not susceptible to blind SQL injection. I was not aware of this. Can anyone elaborate? I am using it on my server and was told not to switch to ...
