nuclei-templates/network/mysql-native-password.yaml

id: mysql-native-password

info:
  name: MySQL DB with enabled native password
  author: iamthefrogy
  severity: info
  description: MySQL instance with enabled native password support is prone to password brute-force attacks.
  tags: network,mysql,bruteforce,db

network:
  - host:
      - "{{Hostname}}"
      - "{{Host}}:3306"

    matchers:
      - type: word
        words:
          - "mysql_native_password"
misc update 2021-09-13 20:24:21 +00:00			`id: mysql-native-password`
added mysql native pass bruteforce template 2021-04-11 14:29:11 +00:00
			`info:`
Update mysql-native-cred-bruteforce.yaml 2021-04-13 13:10:43 +00:00			`name: MySQL DB with enabled native password`
added mysql native pass bruteforce template 2021-04-11 14:29:11 +00:00			`author: iamthefrogy`
Update mysql-native-cred-bruteforce.yaml 2021-04-13 18:52:03 +00:00			`severity: info`
Updates across many templates for clarity, spelling, and grammar. 2021-09-05 21:13:45 +00:00			`description: MySQL instance with enabled native password support is prone to password brute-force attacks.`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`tags: network,mysql,bruteforce,db`
added mysql native pass bruteforce template 2021-04-11 14:29:11 +00:00
			`network:`
			`- host:`
			`- "{{Hostname}}"`
fix: fixed network templates (#3306) 2021-12-09 13:06:24 +00:00			`- "{{Host}}:3306"`
Update mysql-native-cred-bruteforce.yaml 2021-04-13 13:10:43 +00:00
added mysql native pass bruteforce template 2021-04-11 14:29:11 +00:00			`matchers:`
			`- type: word`
			`words:`
			`- "mysql_native_password"`