Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [mysql]

MySQL is an open-source relational database management system.

Filter by
Sorted by
Tagged with
2 votes
1 answer
39 views

sqlmap will not save half dumped data in CSV File?

Is there any way to save half-dumped output in csv file or in table format in sqlmap? Look below image for better understanding. The target is boolean-based blind injection vulnerable. For sure, this ...
Solo's user avatar
  • 31
2 votes
1 answer
64 views

sqlmap cannot detect a confirmed vulnerability

I have a verified injection which looks like: /page/(SELECT+SLEEP(10)) But sqlmap cannot detect it no matter what. This is how I'm running sqlmap: sqlmap -u 'http://MY-SITE/page/*' --level=5 --risk=3 -...
Sohail Saha's user avatar
0 votes
0 answers
49 views

Getting around a WAF's restrictions for SQLi

I have this payload: AND SELECT SUBSTR(table_name,1,1) FROM information_schema.tables > 'A' but a WAF restricts table_name and information_schema keywords and gives a not acceptable message. Is ...
ben39's user avatar
  • 1
0 votes
1 answer
140 views

Conducting a proof-of-concept attack on an open MySQL port

I am not very experienced nor do I have acceptable knowledge, that is why I have signed up to work on a small project to gain some experience, where they don't seem to care about security much. After ...
KhodeNima's user avatar
  • 101
1 vote
0 answers
99 views

Help me securely store and retrieve Social Security numbers [closed]

I am on the very last functionality to implement before launching my app. I have the same requirements someone like Fanduel or Draftkings does. When my users cross the $600 threshold for prizes in the ...
T M's user avatar
  • 11
1 vote
1 answer
140 views

Is there a possible attack on a MySQL database using an input window [closed]

My app has an input field that is used as a source for a HTML and PDF file. I also store this input in my database. My question is: Is it possible to somehow write something in the text field which ...
VicTheWise's user avatar
0 votes
0 answers
65 views

MySQLi On 3 Separate Queries At Once

I'm trying to check whether or not an injectable parameter I found is actually exploitable in a bug bounty contest my college is holding. The code base is open source so I have access to the exact SQL ...
Anili's user avatar
  • 1
0 votes
0 answers
86 views

What are password encryption schemes that result in variable length common in MySQL and PHP?

I have stumbled across passwords on a MySQL database behind a PHP webapp. Here are some examples. 753a524d56b48d825328ce27 789e0ad30d15 7ba0868c23e0a2 d327e265ca2abcd7c 48276b3d5618850 ...
knods's user avatar
  • 1
0 votes
0 answers
130 views

sql injection query error in bwapp?

I am getting this error in mysql Server version: 5.0.96-0ubuntu3 - Error SQL query: Documentation SELECT * FROM bWAPP.movies UNION ALL SELECT 1 , 2, 3, schema_name FROM information_schema.schemata, 6,...
Pankaj's user avatar
  • 1
1 vote
2 answers
184 views

Can my local MySQL server be accessed without permission

I have hosted a MySQL database server on a VPS to connect to a flask web app on the same VPS. It only has users with host as local ip address. Can it be accessed by anyone else remotely, except me? If ...
Prog Techs's user avatar
1 vote
2 answers
161 views

Valid SQL Injection Syntax where same vulnerable parameter used in both a SELECT and a UPDATE statement

I have a problem and I'm hoping someone could help with a POC. In a web application, attacker controlled parameter X is used is used unsanitized in two separate SQL queries within the same function. ...
notnoodles's user avatar
0 votes
0 answers
174 views

store strings in db with asymmetric encryption for a python app keeping the data secure

I'm designing an app that receives sensitive data input from a user and that data needs to be saved securely in a database. As far as I understand it needs asymmetric encryption but since this app has ...
mic f's user avatar
  • 1
1 vote
1 answer
142 views

Need help deciphering these logs regarding YASSL attack on MySQL [closed]

I am getting the occasional message from our Fortigate Fortinet firewall, indicating that there is a yaSSL.Buffer.Overflow attack. The log from the Fortinet is: Description: Subject: attack:MySQL....
Zak's user avatar
  • 111
0 votes
1 answer
135 views

Why can I not sql inject this piece of code? [duplicate]

This is the code: $stmt = $db->prepare("SELECT DISTINCT * FROM kurssit WHERE BINARY id=? AND BINARY avain=?"); $stmt->bind_param("is", $kurssi, $avain); // prepare and bind $...
user285206's user avatar
1 vote
4 answers
800 views

Is this a safe system to authenticate users by phone number?

I'm making a Actix-web/Rust web-application where users are solely allowed to register and login with their mobile phone number. The login-screen consists of one input asking for the phone number. If ...
O'Niel's user avatar
  • 2,914
0 votes
1 answer
126 views

mysql client app sends more ciphers than I specify via command line

There is a server app that supports TLSv1...TLSv1.3 with OpenSSL 3. I'm connecting to it with mysql client app, version mysql Ver 15.1 Distrib 10.5.15-MariaDB, for debian-linux-gnu (x86_64) using ...
Ivan Onyshchenko's user avatar
2 votes
1 answer
644 views

Is encryption with MySQL Aes_encrypt() + stored procedure ok?

I would like to do encryption with MySQL AES_ENCRYPT() function used in a stored procedure on the database. Firstly, I changed the encryption block mode from aes-128-ecb to aes-256-cbc in the MySQL ...
Poubelle Dirty's user avatar
1 vote
0 answers
311 views

MySQL encrypt fields and decrypt them with a password

I'm trying to figure out the best approach to store some information into a DB that will only be accessible by specific users through a password. So let's say I've got user X that stores something ...
Yamile's user avatar
  • 11
1 vote
1 answer
105 views

Changing openssl key/IV when encrypting diffrent rows of data in database?

I'm looking for a way to encrypt data in MySQL database securely. The data come from a web interface from a POST form and each POST request from the user insert a new line in the database. Right now, ...
JohnyJohny's user avatar
1 vote
0 answers
786 views

SQL injection into IN('[injection]') without parentheses or comma

I have the following injection: DELETE FROM table WHERE id IN('[injection]'); And I can use these characters: !#$%&'*+/=?^_`{|}~.- . So I can exit the single-quoted string via ', but I can't exit ...
tim's user avatar
  • 29.6k
0 votes
0 answers
124 views

SQL injection question

I'm doing blackbox testing on a website vulnerable to SQL injection. I put a ' on the search bar, and for some reason it didn't show an error. I put a ' on the search bar this time with a SQL ...
i39's user avatar
  • 1
0 votes
0 answers
87 views

Find why mysqld is trying to reach a blacklisted IP

On a server of mine, its local ESET firewall is blocking MariaDB's mysql process from accessing a blacklisted IP 154.12.54.163:1277. MariaDB is installed and expected on the server. I've also tried ...
unknown techh's user avatar
1 vote
1 answer
184 views

The server acts as a database server , but there is no open port regarding that why?

I've taken a pen-testing course and for the final certificate, I have to analyze a server and make a report regarding the vulnerabilities. The server does multiple functionalities, It acts as a web ...
Kumar's user avatar
  • 41
0 votes
1 answer
972 views

Blind SQLi - guessing column name

I am learning Blind SQLi with Port Swigger Academy but I am stuck on this lab: https://portswigger.net/web-security/sql-injection/blind/lab-conditional-responses. In this lab I have to get the user '...
aeiouoiea's user avatar
0 votes
0 answers
2k views

Best practices for storing passwords for PHP and MySQL applications [duplicate]

I am creating a simplified lead and call management system for a friend's small business. I would like to know the best practices for hardening password storage and verification using PHP 7.4 and ...
huyang888's user avatar
0 votes
1 answer
172 views

Why are MySQL injections more limited than MS-SQL attacks?

I was watching the DEFCON 17: Advanced SQL Injection video here. At 15:00, when discussing the various classes and types of SQL injection attackS, the speaker stated With MySQL you really only have ...
questioner's user avatar
1 vote
1 answer
6k views

sqlmap is encountering 403 forbidden

I am trying to complete an SQL injection CTF here. I confirmed just adding a single ' mark at the end of the URL caused a MySQL syntax error, and following this tutorial, I could complete this ...
questioner's user avatar
1 vote
1 answer
452 views

SQL Injection "Error 1 - Operand should contain 1 column(s)"

I am injecting: -35' and updatexml(null,concat(0x3a,(0x0a,(select database()))),null)-- - and I am receiving: Error 1 - Operand should contain 1 column(s) Any idea how to fix this? I am trying to ...
security researcher's user avatar
0 votes
1 answer
189 views

What is the wisdom of using the ASCII function in exploit SQLi?

I mean, I can exploit the vulnerability using a substring function and without using an ASCII function like: SELECT username FROM users WHERE id = 1 AND (SELECT substring(password,1,1) FROM users ...
Abdrrhmen's user avatar
0 votes
0 answers
540 views

Storing encrypted data inside a JSON array in MySQL?

I have the following the situation: I have some data structures which look like this: { id: int name: BLOB password: VARCHAR(80) ... } There it is easy to store the encrypted fields ...
JavaForAndroid's user avatar
0 votes
0 answers
489 views

How to modify a database through SQL injection UNION?

I need help with an sqli exercise. I used sqlmap to find a UNION vulnerability. I managed to get the H2 version with this payload: string') UNION ALL SELECT NULL,H2VERSION(),NULL,NULL,NULL-- But I ...
ilich262's user avatar
1 vote
2 answers
122 views

Securely storing password and encryption key on AWS

I have an EC2 Webserver on AWS which has a MYSQL database. The login data is stored on AWS using the Secret Manager. I have added an IAM role for the Server to get access to the password and an ...
JavaForAndroid's user avatar
0 votes
2 answers
219 views

Should I update the way I handle authentication for my website?

For my website that is currently in development, I am trying to figure out a way to handle authentication. I am using mysql as my database and nodejs for my server. Currently, my website does the ...
Justiniscoding's user avatar
0 votes
0 answers
283 views

SQL injection into LIMIT in MySQL 8

Given a query such as: SELECT * FROM users limit 1,$limit Is there a way to exploit this when using MySQL 8 and the standard PHP MySQL functions (ie no multi_query)? What I have tried (unsuccessfully)...
tim's user avatar
  • 29.6k
1 vote
2 answers
975 views

Is SQL Injection possible in ORDER BY before LIMIT?

I'm using MySQL with Mybatis library. And I found the code below: SELECT * FROM tableA WHERE xxx ORDER BY ${inputA} ${inputB} LIMIT #{inputC} I know there are many ways to inject the ORDER BY, but ...
seyoatda's user avatar
0 votes
0 answers
734 views

Is my MySQL Server (run by php/apache) affected by the Log4j vulnerability?

From an article for the new Log4j vulnerability, it reads here: A researcher working for Chinese tech firm Alibaba discovered the bug and privately informed the Apache Software Foundation, an all-...
Parking Master's user avatar
2 votes
2 answers
634 views

Multiple user sessions at the same time in a backoffice

I am currently working on a project for a veterinary practice and one of its components is a web-based backoffice for general management. The practice already has a backoffice-style software, but it's ...
user avatar
0 votes
1 answer
575 views

Nmap returns both, mysql and mariadb versions, how do I khow which one is actually running?

I ran nmap scan and output included following line: 3306/tcp open mysql MySQL 5.5.5-10.3.25-MariaDB-0+deb10u1 How do I know which one is actually running, MySQL or MariaDB?
beardeadclown's user avatar
0 votes
2 answers
126 views

Is it possible to compromise a device by connecting to a database?

I have a relatively secure device with very limited internet connections and/or activity. One of those connections is to a AWS RDS database (MySQL) I'm wondering if it's possible that my secure device ...
Trevor Wood's user avatar
0 votes
0 answers
635 views

What's the alternative to storing plain-text passwords in a MySQL Database?

What's the alternative to storing plain-text passwords in a Database? For example, I'm using Node.js to get a POST request for signing up / logging in a user from a webpage. When signing up a user, I ...
Parking Master's user avatar
18 votes
1 answer
3k views

CRM with Client Side Encryption

The company I'm working in wants to develop a CRM that is cloud-based and we will need to store the data safely. I've been searching for a way to create a strategy to save and secure data but I don't ...
Wilson Silva's user avatar
1 vote
1 answer
631 views

Is MariaDB Server obsolete for PHP and Wordpress projects?

PHP (and by extension WordPress) only supports MySQL native & sha256 password authentication. MariaDB Server only supports MySQL native & ed25519 password authentication. Since MySQL native ...
Joseph Michael's user avatar
0 votes
0 answers
287 views

manual SQL injection syntax error on MySQL

I am doing a SQL injection training with TryHackMe as shown below. https://tryhackme.com/room/ccpentesting task 18 I am trying to do it the manual way. From the guide online I know that to get the SQL ...
user1998844's user avatar
0 votes
3 answers
125 views

Is it secure to put a mysqldumped file online?

I made a database table of emoji country codes. I exported the data via mysqldump into a file called countries.sql. I want to share it because it was a hassle finding anything like this, so I want to ...
Christopher Sparks's user avatar
1 vote
1 answer
329 views

Can I use my HTTP/SSL certificate for mysql?

I would like to know if I can use my SSL certificates that I use on my website (based on nodejs and express) for access to mysql database remotely, or if it is better to create new certificate. My ...
Matteo Dal Grande's user avatar
1 vote
1 answer
5k views

Sqlmap Sleepy User-Agent

I was testing Burp Suite Crawl on some old php sites I made and it found Sleepy User-Agent SQL injection vulnerability User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ...
Marek's user avatar
  • 11
0 votes
1 answer
450 views

public MySQL via XAMPP - security - whitelisting IP's versus VPN

I'm working on app that uses MySQL database on XAMPP Control Panel on Windows. I am concerned about security part. I received advice about connecting to MySQL through VPN so it won't be accessible so ...
awehahgnl's user avatar
0 votes
2 answers
164 views

How to connect to a MariaDB database after collecting data about users and passwords with a SQLI? [closed]

I'm trying to breach a dummy MariaDB database which is vulnerable to SQLI and is storing sensitive data about its users and their passwords. I've collected all the data I could collect, but now how am ...
justanothernoob's user avatar
0 votes
2 answers
3k views

How to know whether mysql connection is using SSL or TLS connection?

I want to verify whether mysql remote connection is using tls/ssl connection for security purposes. I ran status command to check initially: mysql> status -------------- mysql Ver 8.0.19 for osx10....
ANWESH MOHAPATRA's user avatar
0 votes
0 answers
156 views

Is that SQL query exploitable for really malicious things

I have following SQL query in my WordPress plugin, SELECT `ID`, `post_content` FROM `wp_posts` WHERE `post_type` = 'movie' AND `post_status` = 'publish' OR `post_status` = 'private' AND `ID` NOT ...
User9123's user avatar

1
2 3 4 5
11