mysql creds -update

javascript/audit/mysql/mysql-load-file.yaml

@@ -28,17 +28,15 @@ javascript:
 
     payloads:
       usernames:
-        - anonymous
         - root
         - admin
         - mysql
-        - nagiosxi
+        - test
       passwords:
-        - SqlServer0
         - root
-        - cloudera
         - admin
-        - moves
+        - mysql
+        - test
     attack: clusterbomb
 
     stop-at-first-match: true

javascript/enumeration/mysql/mysql-default-login.yaml

@@ -28,13 +28,26 @@ javascript:
       User: "{{usernames}}"
       Pass: "{{passwords}}"
 
-    threads: 10
-    attack: pitchfork
+    args:
+      Host: "{{Host}}"
+      Port: "3306"
+      Query: SELECT LOAD_FILE('/etc/passwd')
+      User: "{{usernames}}"
+      Pass: "{{passwords}}"
 
     payloads:
-      usernames: helpers/wordlists/mysql-users.txt
-      passwords: helpers/wordlists/mysql-passwords.txt
-    stop-at-first-match: true
+      usernames:
+        - root
+        - admin
+        - mysql
+        - test
+      passwords:
+        - root
+        - admin
+        - mysql
+        - test
+        -
+    attack: clusterbomb
 
     matchers:
       - type: dsl

javascript/enumeration/mysql/mysql-show-databases.yaml

@@ -27,17 +27,15 @@ javascript:
 
     payloads:
       usernames:
-        - anonymous
         - root
         - admin
         - mysql
-        - nagiosxi
+        - test
       passwords:
-        - SqlServer0
         - root
-        - cloudera
         - admin
-        - moves
+        - mysql
+        - test
     attack: clusterbomb
 
     stop-at-first-match: true

javascript/enumeration/mysql/mysql-show-variables.yaml

@@ -27,17 +27,15 @@ javascript:
 
     payloads:
       usernames:
-        - anonymous
         - root
         - admin
         - mysql
-        - nagiosxi
+        - test
       passwords:
-        - SqlServer0
         - root
-        - cloudera
         - admin
-        - moves
+        - mysql
+        - test
     attack: clusterbomb
 
     stop-at-first-match: true

javascript/enumeration/mysql/mysql-user-enum.yaml

@@ -29,17 +29,15 @@ javascript:
 
     payloads:
       usernames:
-        - anonymous
         - root
         - admin
         - mysql
-        - nagiosxi
+        - test
       passwords:
-        - SqlServer0
         - root
-        - cloudera
         - admin
-        - moves
+        - mysql
+        - test
     attack: clusterbomb
 
     stop-at-first-match: true