Questions tagged [mysql]
MySQL is an open-source relational database management system.
523
questions
0
votes
2
answers
72
views
if mysql server is not running, is it still possible somebody gain access to my database from outside LAN (hack my database without my consent?)
I am using phpmyadmin running on xampp windows in a LAN environment. I want to find some ultimate secure solution for my database. So I am not running mysql (showing Stop in xampp control panel), is ...
- 1
1
vote
0
answers
89
views
MySQL Injection with a incomplete database [closed]
I have a database in which most or maybe even all columns are empty. Yet I have to gain access to the database via a user called Tom.
I found out that the table is called users and the query the ...
2
votes
1
answer
163
views
sqlmap will not save half dumped data in CSV File?
Is there any way to save half-dumped output in csv file or in table format in sqlmap?
Look below image for better understanding. The target is boolean-based blind injection vulnerable. For sure, this ...
- 41
2
votes
1
answer
139
views
sqlmap cannot detect a confirmed vulnerability
I have a verified injection which looks like:
/page/(SELECT+SLEEP(10))
But sqlmap cannot detect it no matter what.
This is how I'm running sqlmap:
sqlmap -u 'http://MY-SITE/page/*' --level=5 --risk=3 -...
- 121
0
votes
0
answers
67
views
Getting around a WAF's restrictions for SQLi
I have this payload: AND SELECT SUBSTR(table_name,1,1) FROM information_schema.tables > 'A'
but a WAF restricts table_name and information_schema keywords and gives a not acceptable message.
Is ...
- 1
1
vote
1
answer
262
views
Conducting a proof-of-concept attack on an open MySQL port
I am not very experienced nor do I have acceptable knowledge, that is why I have signed up to work on a small project to gain some experience, where they don't seem to care about security much.
After ...
- 111
1
vote
0
answers
113
views
Help me securely store and retrieve Social Security numbers [closed]
I am on the very last functionality to implement before launching my app. I have the same requirements someone like Fanduel or Draftkings does. When my users cross the $600 threshold for prizes in the ...
- 11
1
vote
1
answer
149
views
Is there a possible attack on a MySQL database using an input window [closed]
My app has an input field that is used as a source for a HTML and PDF file.
I also store this input in my database.
My question is: Is it possible to somehow write something in the text field which ...
- 11
0
votes
0
answers
93
views
What are password encryption schemes that result in variable length common in MySQL and PHP?
I have stumbled across passwords on a MySQL database behind a PHP webapp. Here are some examples.
753a524d56b48d825328ce27
789e0ad30d15
7ba0868c23e0a2
d327e265ca2abcd7c
48276b3d5618850
...
- 1
2
votes
2
answers
222
views
Can my local MySQL server be accessed without permission
I have hosted a MySQL database server on a VPS to connect to a flask web app on the same VPS. It only has users with host as local ip address. Can it be accessed by anyone else remotely, except me? If ...
- 21
1
vote
2
answers
176
views
Valid SQL Injection Syntax where same vulnerable parameter used in both a SELECT and a UPDATE statement
I have a problem and I'm hoping someone could help with a POC.
In a web application, attacker controlled parameter X is used is used unsanitized in two separate SQL queries within the same function.
...
- 11
0
votes
0
answers
206
views
store strings in db with asymmetric encryption for a python app keeping the data secure
I'm designing an app that receives sensitive data input from a user and that data needs to be saved securely in a database.
As far as I understand it needs asymmetric encryption but since this app has ...
- 1
1
vote
1
answer
156
views
Need help deciphering these logs regarding YASSL attack on MySQL [closed]
I am getting the occasional message from our Fortigate Fortinet firewall, indicating that there is a yaSSL.Buffer.Overflow attack. The log from the Fortinet is:
Description: Subject: attack:MySQL....
- 111
0
votes
1
answer
138
views
Why can I not sql inject this piece of code? [duplicate]
This is the code:
$stmt = $db->prepare("SELECT DISTINCT * FROM kurssit WHERE BINARY id=? AND BINARY avain=?");
$stmt->bind_param("is", $kurssi, $avain);
// prepare and bind
$...
1
vote
4
answers
869
views
Is this a safe system to authenticate users by phone number?
I'm making a Actix-web/Rust web-application where users are solely allowed to register and login with their mobile phone number. The login-screen consists of one input asking for the phone number. If ...
- 3,426
0
votes
1
answer
150
views
mysql client app sends more ciphers than I specify via command line
There is a server app that supports TLSv1...TLSv1.3 with OpenSSL 3.
I'm connecting to it with mysql client app, version mysql Ver 15.1 Distrib 10.5.15-MariaDB, for debian-linux-gnu (x86_64) using ...
2
votes
1
answer
703
views
Is encryption with MySQL Aes_encrypt() + stored procedure ok?
I would like to do encryption with MySQL AES_ENCRYPT() function used in a stored procedure on the database.
Firstly, I changed the encryption block mode from aes-128-ecb to aes-256-cbc in the MySQL ...
1
vote
0
answers
323
views
MySQL encrypt fields and decrypt them with a password
I'm trying to figure out the best approach to store some information into a DB that will only be accessible by specific users through a password.
So let's say I've got user X that stores something ...
- 11
1
vote
1
answer
124
views
Changing openssl key/IV when encrypting diffrent rows of data in database?
I'm looking for a way to encrypt data in MySQL database securely. The data come from a web interface from a POST form and each POST request from the user insert a new line in the database.
Right now, ...
- 11
1
vote
0
answers
941
views
SQL injection into IN('[injection]') without parentheses or comma
I have the following injection:
DELETE FROM table WHERE id IN('[injection]');
And I can use these characters: !#$%&'*+/=?^_`{|}~.- . So I can exit the single-quoted string via ', but I can't exit ...
- 29.7k
0
votes
0
answers
140
views
SQL injection question
I'm doing blackbox testing on a website vulnerable to SQL injection.
I put a ' on the search bar, and for some reason it didn't show an error.
I put a ' on the search bar this time with a SQL ...
- 1
0
votes
0
answers
95
views
Find why mysqld is trying to reach a blacklisted IP
On a server of mine, its local ESET firewall is blocking MariaDB's mysql process from accessing a blacklisted IP 154.12.54.163:1277. MariaDB is installed and expected on the server.
I've also tried ...
1
vote
1
answer
217
views
The server acts as a database server , but there is no open port regarding that why?
I've taken a pen-testing course and for the final certificate, I have to analyze a server and make a report regarding the vulnerabilities.
The server does multiple functionalities, It acts as a web ...
- 41
0
votes
1
answer
1k
views
Blind SQLi - guessing column name
I am learning Blind SQLi with Port Swigger Academy but I am stuck on this lab: https://portswigger.net/web-security/sql-injection/blind/lab-conditional-responses.
In this lab I have to get the user '...
0
votes
0
answers
2k
views
Best practices for storing passwords for PHP and MySQL applications [duplicate]
I am creating a simplified lead and call management system for a friend's small business.
I would like to know the best practices for hardening password storage and verification using PHP 7.4 and ...
0
votes
1
answer
178
views
Why are MySQL injections more limited than MS-SQL attacks?
I was watching the DEFCON 17: Advanced SQL Injection video here.
At 15:00, when discussing the various classes and types of SQL injection attackS, the speaker stated
With MySQL you really only have ...
- 211
1
vote
1
answer
7k
views
sqlmap is encountering 403 forbidden
I am trying to complete an SQL injection CTF here.
I confirmed just adding a single ' mark at the end of the URL caused a MySQL syntax error, and following this tutorial, I could complete this ...
- 211
1
vote
1
answer
485
views
SQL Injection "Error 1 - Operand should contain 1 column(s)"
I am injecting:
-35' and updatexml(null,concat(0x3a,(0x0a,(select database()))),null)-- -
and I am receiving:
Error 1 - Operand should contain 1 column(s)
Any idea how to fix this?
I am trying to ...
0
votes
1
answer
203
views
What is the wisdom of using the ASCII function in exploit SQLi?
I mean, I can exploit the vulnerability using a substring function and without using an ASCII function like:
SELECT username FROM users WHERE id = 1 AND (SELECT substring(password,1,1) FROM users ...
0
votes
0
answers
585
views
Storing encrypted data inside a JSON array in MySQL?
I have the following the situation: I have some data structures which look like this:
{
id: int
name: BLOB
password: VARCHAR(80)
...
}
There it is easy to store the encrypted fields ...
- 131
1
vote
0
answers
547
views
How to modify a database through SQL injection UNION?
I need help with an sqli exercise. I used sqlmap to find a UNION vulnerability.
I managed to get the H2 version with this payload:
string') UNION ALL SELECT NULL,H2VERSION(),NULL,NULL,NULL--
But I ...
- 21
1
vote
2
answers
126
views
Securely storing password and encryption key on AWS
I have an EC2 Webserver on AWS which has a MYSQL database. The login data is stored on AWS using the Secret Manager. I have added an IAM role for the Server to get access to the password and an ...
- 131
0
votes
2
answers
229
views
Should I update the way I handle authentication for my website?
For my website that is currently in development, I am trying to figure out a way to handle authentication. I am using mysql as my database and nodejs for my server. Currently, my website does the ...
- 123
0
votes
0
answers
299
views
SQL injection into LIMIT in MySQL 8
Given a query such as:
SELECT * FROM users limit 1,$limit
Is there a way to exploit this when using MySQL 8 and the standard PHP MySQL functions (ie no multi_query)?
What I have tried (unsuccessfully)...
- 29.7k
1
vote
2
answers
1k
views
Is SQL Injection possible in ORDER BY before LIMIT?
I'm using MySQL with Mybatis library. And I found the code below:
SELECT *
FROM tableA
WHERE xxx
ORDER BY ${inputA} ${inputB}
LIMIT #{inputC}
I know there are many ways to inject the ORDER BY, but ...
- 11
0
votes
0
answers
740
views
Is my MySQL Server (run by php/apache) affected by the Log4j vulnerability?
From an article for the new Log4j vulnerability, it reads here:
A researcher working for Chinese tech firm Alibaba discovered the bug and privately informed the Apache Software Foundation, an all-...
- 289
2
votes
2
answers
750
views
Multiple user sessions at the same time in a backoffice [closed]
I am currently working on a project for a veterinary practice and one of its components is a web-based backoffice for general management.
The practice already has a backoffice-style software, but it's ...
user271185
0
votes
1
answer
601
views
Nmap returns both, mysql and mariadb versions, how do I khow which one is actually running?
I ran nmap scan and output included following line:
3306/tcp open mysql MySQL 5.5.5-10.3.25-MariaDB-0+deb10u1
How do I know which one is actually running, MySQL or MariaDB?
- 129
0
votes
2
answers
139
views
Is it possible to compromise a device by connecting to a database?
I have a relatively secure device with very limited internet connections and/or activity. One of those connections is to a AWS RDS database (MySQL)
I'm wondering if it's possible that my secure device ...
- 533
0
votes
0
answers
682
views
What's the alternative to storing plain-text passwords in a MySQL Database?
What's the alternative to storing plain-text passwords in a Database?
For example, I'm using Node.js to get a POST request for signing up / logging in a user from a webpage.
When signing up a user, I ...
- 289
18
votes
1
answer
3k
views
CRM with Client Side Encryption
The company I'm working in wants to develop a CRM that is cloud-based and we will need to store the data safely.
I've been searching for a way to create a strategy to save and secure data but I don't ...
- 291
1
vote
1
answer
653
views
Is MariaDB Server obsolete for PHP and Wordpress projects?
PHP (and by extension WordPress) only supports MySQL native & sha256 password authentication.
MariaDB Server only supports MySQL native & ed25519 password authentication.
Since MySQL native ...
0
votes
0
answers
319
views
manual SQL injection syntax error on MySQL
I am doing a SQL injection training with TryHackMe as shown below. https://tryhackme.com/room/ccpentesting task 18
I am trying to do it the manual way. From the guide online I know that to get the SQL ...
- 103
0
votes
3
answers
131
views
Is it secure to put a mysqldumped file online?
I made a database table of emoji country codes. I exported the data via mysqldump into a file called countries.sql.
I want to share it because it was a hassle finding anything like this, so I want to ...
1
vote
1
answer
353
views
Can I use my HTTP/SSL certificate for mysql?
I would like to know if I can use my SSL certificates that I use on my website (based on nodejs and express) for access to mysql database remotely, or if it is better to create new certificate.
My ...
2
votes
1
answer
6k
views
Sqlmap Sleepy User-Agent
I was testing Burp Suite Crawl on some old php sites I made and it found Sleepy User-Agent
SQL injection vulnerability
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64)
AppleWebKit/537.36 (KHTML, ...
- 31
0
votes
1
answer
496
views
public MySQL via XAMPP - security - whitelisting IP's versus VPN
I'm working on app that uses MySQL database on XAMPP Control Panel on Windows.
I am concerned about security part.
I received advice about connecting to MySQL through VPN so it won't be accessible so ...
0
votes
2
answers
171
views
How to connect to a MariaDB database after collecting data about users and passwords with a SQLI? [closed]
I'm trying to breach a dummy MariaDB database which is vulnerable to SQLI and is storing sensitive data about its users and their passwords. I've collected all the data I could collect, but now how am ...
0
votes
2
answers
4k
views
How to know whether mysql connection is using SSL or TLS connection?
I want to verify whether mysql remote connection is using tls/ssl connection for security purposes.
I ran status command to check initially:
mysql> status
--------------
mysql Ver 8.0.19 for osx10....
0
votes
0
answers
162
views
Is that SQL query exploitable for really malicious things
I have following SQL query in my WordPress plugin,
SELECT `ID`, `post_content`
FROM `wp_posts`
WHERE `post_type` = 'movie'
AND `post_status` = 'publish'
OR `post_status` = 'private'
AND `ID` NOT ...
- 1