+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: MySQL Remote Connection (/showthread.php?tid=4457656)
MySQL Remote Connection - kambrik - Sep 22, 2014
Im trying to figure out if this error means that you can only log in with a specific ip: [yes/no]?
ERROR 1045 (28000): Access denied for user 'user'@'ip_address' (using password: YES)
* - ShadowCloud - Sep 22, 2014
(Sep 22, 2014 09:44 AM)kambrik Wrote: Im trying to figure out if this error means that you can only log in with a specific ip: [yes/no]?
ERROR 1045 (28000): Access denied for user 'user'@'ip_address' (using password: YES)
You might want to spend some time on this page:
http://dev.mysql.com/doc/refman/5.0/en/access-denied.html
* - kambrik - Sep 22, 2014
(Sep 22, 2014 09:48 AM)ShadowCloud Wrote: You might want to spend some time on this page:
http://dev.mysql.com/doc/refman/5.0/en/access-denied.html
Thanks that helped alot... Any tricks around this that anyone knows?
* - ShadowCloud - Sep 22, 2014
(Sep 22, 2014 10:10 AM)kambrik Wrote: Thanks that helped alot... Any tricks around this that anyone knows?
Most likely use the correct password? I know I wrote a query to essentially brute force MSSQL passwords using server resources at one point, but it won't work for MySQL.
Openrowset.
Is there a website running that's accessible and using this mysql server?
* - kambrik - Sep 22, 2014
(Sep 22, 2014 10:13 AM)ShadowCloud Wrote: Most likely use the correct password? I know I wrote a query to essentially brute force MSSQL passwords using server resources at one point, but it won't work for MySQL.
Openrowset.
Is there a website running that's accessible and using this mysql server?
Yes there is... and I know the u/p combo is correct... Its not just one several situations like this, so im pretty sure that its ip/domain specific (aka user@ip) that needs to be there but it just seems like that would be a headache...
* - ShadowCloud - Sep 22, 2014
(Sep 22, 2014 10:18 AM)kambrik Wrote: Yes there is... and I know the u/p combo is correct... Its not just one several situations like this, so im pretty sure that its ip/domain specific (aka user@ip) that needs to be there but it just seems like that would be a headache...
Pretty sure you are shit out of luck then, you can spoof the IP for UDP requests, not TCP though.
That being said, you might be able to issue queries via the site if it's vulnerable to SQLi?
* - kambrik - Sep 22, 2014
(Sep 22, 2014 10:21 AM)ShadowCloud Wrote: Pretty sure you are shit out of luck then, you can spoof the IP for UDP requests, not TCP though.
That being said, you might be able to issue queries via the site if it's vulnerable to SQLi?
True... Im not that worried about it in this scenario quantity over quality is the factor here... But I was thinking about it they were prolly givin the database to use for said website but not granted remote login hence the reason im getting the error. Or there is some sort of cpanel like login for them to do what they need via the web... Thanks for your help though... it helps to bounce ideas back n forth sometimes...
* - Gruv3r14 - Sep 24, 2014
Have you tried uploading a reverse shell to the host?
* - pelayo - Sep 24, 2014
If you have the correct login/password for the MySQL server, you can try logging into phpmyadmin. A lot of times, remote connections are disabled. If you can upload a shell via phpmyadmin, you could try connecting to the MySQL server locally through the shell.