nuclei-templates/network/tidb-native-password.yaml

id: tidb-native-password

info:
  name: TiDB DB with enabled native password
  author: lu4nx
  severity: info
  description: TiDB is fully compatible with the MySQL 5.7 protocol and the common features and syntax of MySQL 5.7. TiDB instance with enabled native password support prone vulnerable for password brute-force attack.
  tags: network,tidb,bruteforce,db

network:
  - host:
      - "{{Hostname}}"
      - "{{Host}}:4000"

    matchers:
      - type: word
        words:
          - "mysql_native_password"
          - "TiDB"
        condition: and
misc update 2021-09-13 20:24:21 +00:00			`id: tidb-native-password`
Add: TiDB Native password bruteforce check plugin 2021-09-09 08:14:08 +00:00
			`info:`
			`name: TiDB DB with enabled native password`
			`author: lu4nx`
			`severity: info`
			`description: TiDB is fully compatible with the MySQL 5.7 protocol and the common features and syntax of MySQL 5.7. TiDB instance with enabled native password support prone vulnerable for password brute-force attack.`
Update tidb-native-cred-bruteforce.yaml 2021-09-10 06:43:16 +00:00			`tags: network,tidb,bruteforce,db`
Add: TiDB Native password bruteforce check plugin 2021-09-09 08:14:08 +00:00
			`network:`
			`- host:`
			`- "{{Hostname}}"`
fix: fixed network templates (#3306) 2021-12-09 13:06:24 +00:00			`- "{{Host}}:4000"`
Add: TiDB Native password bruteforce check plugin 2021-09-09 08:14:08 +00:00
			`matchers:`
			`- type: word`
			`words:`
			`- "mysql_native_password"`
			`- "TiDB"`
Update tidb-native-cred-bruteforce.yaml 2021-09-10 06:43:16 +00:00			`condition: and`