[kambrik]

Im trying to figure out if this error means that you can only log in with a specific ip: [yes/no]?

ERROR 1045 (28000): Access denied for user 'user'@'ip_address' (using password: YES)

[ShadowCloud]

Im trying to figure out if this error means that you can only log in with a specific ip: [yes/no]?

ERROR 1045 (28000): Access denied for user 'user'@'ip_address' (using password: YES)

You might want to spend some time on this page:

http://dev.mysql.com/doc/refman/5.0/en/a...enied.html

[kambrik]

You might want to spend some time on this page:

http://dev.mysql.com/doc/refman/5.0/en/a...enied.html

Thanks that helped alot... Any tricks around this that anyone knows?

[ShadowCloud]

Thanks that helped alot... Any tricks around this that anyone knows?

Most likely use the correct password? I know I wrote a query to essentially brute force MSSQL passwords using server resources at one point, but it won't work for MySQL.

Openrowset.

Is there a website running that's accessible and using this mysql server?

[kambrik]

Most likely use the correct password? I know I wrote a query to essentially brute force MSSQL passwords using server resources at one point, but it won't work for MySQL.

Openrowset.

Is there a website running that's accessible and using this mysql server?

Yes there is... and I know the u/p combo is correct... Its not just one several situations like this, so im pretty sure that its ip/domain specific (aka user@ip) that needs to be there but it just seems like that would be a headache...

[ShadowCloud]

Yes there is... and I know the u/p combo is correct... Its not just one several situations like this, so im pretty sure that its ip/domain specific (aka user@ip) that needs to be there but it just seems like that would be a headache...

Pretty sure you are shit out of luck then, you can spoof the IP for UDP requests, not TCP though.

That being said, you might be able to issue queries via the site if it's vulnerable to SQLi?

[kambrik]

Pretty sure you are shit out of luck then, you can spoof the IP for UDP requests, not TCP though.

That being said, you might be able to issue queries via the site if it's vulnerable to SQLi?

True... Im not that worried about it in this scenario quantity over quality is the factor here... But I was thinking about it they were prolly givin the database to use for said website but not granted remote login hence the reason im getting the error. Or there is some sort of cpanel like login for them to do what they need via the web... Thanks for your help though... it helps to bounce ideas back n forth sometimes...

[Gruv3r14]

Have you tried uploading a reverse shell to the host?

[pelayo]

If you have the correct login/password for the MySQL server, you can try logging into phpmyadmin. A lot of times, remote connections are disabled. If you can upload a shell via phpmyadmin, you could try connecting to the MySQL server locally through the shell.