Metasploit Revealed: Secrets of the Expert Pentester

Finding MySQL users with Metasploit

Metasploit offers a mysql_hashdump module to gather details such as the USERNAME and PASSWORD hashes for the other users of the MySQL database. Let's see how we can use this module:

We just need to set RHOSTS; we can skip setting the PASSWORD since it's blank. Let's run the module:

We can see that we have four other users where only the user admin is password protected. Additionally, we can copy the hash and run it against password cracking tools to obtain clear text passwords.