Questions tagged [mariadb]
MariaDB is an SQL database server.
18
questions
0
votes
1
answer
151
views
Nmap returns both, mysql and mariadb versions, how do I khow which one is actually running?
I ran nmap scan and output included following line:
3306/tcp open mysql MySQL 5.5.5-10.3.25-MariaDB-0+deb10u1
How do I know which one is actually running, MySQL or MariaDB?
1
vote
1
answer
205
views
Is MariaDB Server obsolete for PHP and Wordpress projects?
PHP (and by extension WordPress) only supports MySQL native & sha256 password authentication.
MariaDB Server only supports MySQL native & ed25519 password authentication.
Since MySQL native ...
0
votes
2
answers
108
views
How to connect to a MariaDB database after collecting data about users and passwords with a SQLI? [closed]
I'm trying to breach a dummy MariaDB database which is vulnerable to SQLI and is storing sensitive data about its users and their passwords. I've collected all the data I could collect, but now how am ...
0
votes
2
answers
477
views
How to know whether mysql connection is using SSL or TLS connection?
I want to verify whether mysql remote connection is using tls/ssl connection for security purposes.
I ran status command to check initially:
mysql> status
--------------
mysql Ver 8.0.19 for osx10....
0
votes
1
answer
655
views
Is it possible to locate web document root using SQL query/SQL Injection?
I have access to MySQL database which the current user has FILE privilege. I want to upload a web shell but I do not know the root directory of the web server.
Is it possible to somehow locate the ...
- 48
0
votes
1
answer
825
views
SQLMap Only Returns information_schema
I run this command python sqlmap.py -u https://acme.com/post.php --data "id=1" --tamper="between,randomcase,space2comment" -v 3 --random-agent --dbs but SQLMap only returns ...
- 48
0
votes
0
answers
592
views
Sqlmap not detects error based injection
I am working on Hack the VM (hard machine) for my OSCP preparation
There is a web app with two drop down boxes.. Year and month.. both contain numbers and a submit to fetch data from DB based on year ...
- 43
7
votes
1
answer
579
views
How does MariaDB's ed25519 auth scheme work?
Newer versions of MariaDB (a MySQL database server fork) have a new password based auth scheme called "ed25519". The docs are very sparse regarding how it works and what it does.
https://mariadb.com/...
- 7,553
0
votes
0
answers
2k
views
SQL Injection bypass UNION filter/restriciton
I've recently had an interesting interview exercise I haven't completed and it does puzzle me what kind of filter/protection they've used.
The vuln app is a PHP with simple MariaDB (5.5.56) back-end, ...
- 29
0
votes
1
answer
670
views
Is it secure to store my mysql password in a const std::string?
I am implementing a C++ server with a mariadb backend. I have to access my database and I do so using the mariadbpp (its c++ connector). Though I can use mysql_config_editor and store the passwords in ...
- 105
1
vote
2
answers
2k
views
SQL Injection on MariaDB
I am trying to exploit (legally) a MariaDb database with an SQLi vulnerability.
I have identified the vulnerability here...
/?o=1&page=app
The o=* is vulnerable and produces the following error....
- 139
1
vote
2
answers
1k
views
SQL-injection, unable to get it to work!
I've recently found a SQL-injection vulnerability in one of our web applications. I've been able to exploit this SQLi, but only able to extract some very basic information. I'm not an expert pentester ...
- 19
0
votes
1
answer
984
views
SQl Injection MariaDB
Im found a sql query that is injectable below
"car_info = query("select models, color, running from cars where manual = 1 AND UID = '{}' LIMIT 1".format(uid))")
Where '{}' is the point of injection.
...
- 179
0
votes
1
answer
4k
views
SQL inject MariaDB with SQLMAP
I'm fairly new to sqlmap but I have tried a lot of attacks and have been successful except for this one attack that I have tried. SQLMAP won't detect this nor try to inject an error like this.
So how ...
- 1
0
votes
1
answer
168
views
Linking mail server with application database
I have a web application running on node.js, backed by a MongoDB database which stores user data etc... I'd like to offer my users an email account, so I've set up a mail server using Postfix, dovecot,...
- 143
3
votes
1
answer
2k
views
Are MariaDB's encryption and compression functions secure?
MariaDB [(none)]> SET @key_str = SHA2('Is it secure?',512);
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> SET @crypt_str = AES_ENCRYPT('cleartext',@key_str);
Query OK, 0 rows affected (...
- 1,399
2
votes
4
answers
14k
views
Simple SQL injection to bypass login in MariaDB
I'm trying out SQL Injection on my localhost. I have a simple HTML form, with a username, password and a submit button. So after clicking on the submit, user is redirected from login.html to a page ...
- 23
-1
votes
1
answer
654
views
Is it true that blind SQL injection does not work on MariaDB?
I was told by someone on the network that MariaDB was not susceptible to blind SQL injection. I was not aware of this. Can anyone elaborate? I am using it on my server and was told not to switch to ...
